Approved changes feed: RSS · Atom

cpe:2.3:a:geovision_inc.:gv-lpc2011_lpc2211:1.13:*:*:*:*:*:*:*

part: a version: 1.13 update: *

VendorGeovision Inc. (1f9b8475-73fe-5d5d-9d88-a1e8ba8ee9f7)
ProductGv Lpc2011 Lpc2211 (ac8cb5d8-e3a4-59f9-860f-22b71e276e35)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-88270 vulnerable 2026-09-16 04:34:09.287846 GV-LPC2011/LPC2211 - SSVR Guest Firmware-Mode Pre-Validation Service Teardown Denial of Service
MEDIUM (6.5)
GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated.
Published: 2026-09-10T08:19:10.954Z
Updated: 2026-09-10T17:30:11.233Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-88281 vulnerable 2026-09-16 04:34:09.280316 GV-LPC2011/LPC2211 - ONVIF DeleteUsers Repeated-Element Stack Overflow Denial of Service
MEDIUM (4.9)
GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker.
Published: 2026-09-10T08:22:48.637Z
Updated: 2026-09-10T15:15:14.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-88274 vulnerable 2026-09-16 04:34:09.273725 GV-LPC2011/LPC2211 - Wireless SSID Command Injection
HIGH (7.2)
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root.
Published: 2026-09-10T08:20:27.221Z
Updated: 2026-09-10T15:49:07.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-88285 vulnerable 2026-09-16 04:34:09.270517 GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service
CRITICAL (9.4)
GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands.
Published: 2026-09-10T08:24:15.534Z
Updated: 2026-09-10T15:08:11.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-88271 vulnerable 2026-09-16 04:34:09.267284 GV-LPC2011/LPC2211 - SSVR Guest Configuration Overwrite and Administrative Credential Takeover
HIGH (8.8)
GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR.
Published: 2026-09-10T08:19:30.491Z
Updated: 2026-09-10T17:29:05.605Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-88269 vulnerable 2026-09-16 04:34:09.262044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-88275 vulnerable 2026-09-16 04:34:09.247619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-88288 vulnerable 2026-09-16 04:34:09.235785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-88279 vulnerable 2026-09-16 04:34:09.227721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-88273 vulnerable 2026-09-16 04:34:09.210252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-88286 vulnerable 2026-09-16 04:34:09.182234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-88272 vulnerable 2026-09-16 04:34:09.142817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-88283 vulnerable 2026-09-16 04:34:09.125172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-88287 vulnerable 2026-09-16 04:34:09.107031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.