GeoVision LPC2011/LPC2211 CVE-2026-42365

The GeoVision Web Interface on a GV-LPC2011 or GV-LPC2211 running firmware 1.10 must be network-reachable by the attacker, and the device must be issuing the affected predictable session cookies (default behavior per the advisory). No authentication, user interaction, or non-default configuration is required (CVSS PR:N/UI:N). Exploitation is bounded by network exposure - devices behind VPN, on isolated management VLANs, or behind firewalls that block the HTTP management port are not reachable - and by any rate-limiting or account-lockout in front of the interface, which would slow but not prevent the brute force.

The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, 7.5 High) describes a network-reachable, unauthenticated, low-complexity attack with high confidentiality impact only - consistent with reading the device UI/feeds without modifying configuration. Real-world risk signals diverge: EPSS is very low (0.06%, 18th percentile), CISA SSVC reports Exploitation:none and Automatable:no, and no KEV listing or public exploit is identified, indicating this is not currently a widespread exploitation target. However, brute-forcing session cookies is inherently automatable in practice, so the SSVC 'Automatable:no' judgment is worth questioning and may reflect the absence of a packaged exploit rather than an inherent constraint. Risk concentrates in deployments where these cameras are directly internet-exposed or reachable from untrusted network segments; in segmented LPR installations the practical risk is materially lower.

An attacker locates an exposed GV-LPC2011/LPC2211 management interface via Shodan or similar scanning, captures one or more session cookies issued by the device, and uses the observed structure to script enumeration of the predictable cookie space against the Web Interface. Once a valid cookie is found, the attacker accesses the authenticated UI to view live plate-capture feeds, recorded events, and device configuration. No public exploit is identified at time of analysis, but the technique is straightforward to implement.