Gv Lpclpc2011 2211
Approved changes feed: RSS · Atom
cpe:2.3:a:geovision_inc.:gv-lpclpc2011_2211:1.14:*:*:*:*:*:*:*
part: a version: 1.14 update: *
| Vendor | Geovision Inc. (1f9b8475-73fe-5d5d-9d88-a1e8ba8ee9f7) |
|---|---|
| Product | Gv Lpclpc2011 2211 (f402cf70-d110-57de-a9a6-9cd8ef08f096) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-88278 |
not_vulnerable | 2026-09-16 04:34:09.306258 |
GV-LPCLPC2011/2211 - ONVIF WS-Security PasswordDigest Replay
CRITICAL (9.8)
GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations.
Published: 2026-09-10T08:21:58.700Z
Updated: 2026-09-10T15:30:12.089Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-88268 |
not_vulnerable | 2026-09-16 04:34:09.284127 |
GV-LPC2011/LPC2211 - SSVR Fragment-Reassembly Stack Overflow Denial of Service
MEDIUM (6.5)
GeoVision GV-LPC2211
V1.13 contains an authenticated stack buffer overflow in SSVR fragment
reassembly that allows a valid user to crash the SSVR service.
Published: 2026-09-10T08:18:21.115Z
Updated: 2026-09-10T12:49:39.019Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-88282 |
not_vulnerable | 2026-09-16 04:34:09.202497 |
GV-LPCLPC2011/2211 - Stored FTP-Username Command Injection
HIGH (7.2)
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be executed as arbitrary root commands during a subsequent FTP-account update.
Published: 2026-09-10T08:23:11.488Z
Updated: 2026-09-10T15:12:18.416Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-88277 |
not_vulnerable | 2026-09-16 04:34:09.193792 |
GV-LPCLPC2011/2211 - ONVIF Subscribe Address Command Injection
HIGH (8.8)
GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root.
Published: 2026-09-10T08:21:43.210Z
Updated: 2026-09-10T17:19:04.393Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-88276 |
not_vulnerable | 2026-09-16 04:34:09.118129 |
GV-LPCLPC2011/2211 - Wireless WEP Key1-Key4 Command Injection
HIGH (7.2)
GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root.
Published: 2026-09-10T08:21:28.007Z
Updated: 2026-09-10T15:39:15.486Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.