What is the CVSS score of CVE-2026-57877?

CVE-2026-57877 has a CVSS 3.1 base score of 8.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H. EPSS exploitation probability: 0.2%.

Which versions of GeoVision GV-LPC are affected by CVE-2026-57877?

GeoVision GV-LPC2011 and GV-LPC2211 license plate recognition cameras (firmware V1.12 and earlier) are vulnerable to unauthenticated remote denial of service and potential memory disclosure through a…

How to fix or mitigate CVE-2026-57877?

24 hours: Audit inventory of GeoVision GV-LPC2011 and GV-LPC2211 cameras; document all firmware versions; restrict network access to vlsvr service to authorized administration networks only via firewall rules. 7 days: Implement network segmentation isolating affected cameras from general corporate network; configure access control lists blocking unauthenticated connections; enable verbose logging on all access attempts to these devices. 30 days: Monitor GeoVision security advisories for patch release (monitor https://www.geovision.com.tw/Support/Download); evaluate firmware upgrade timelines; assess replacement timeline if patches remain unavailable beyond 90 days.

GeoVision GV-LPC CVE-2026-57877

EUVD-2026-39633 HIGH

Use of Externally-Controlled Format String (CWE-134)

2026-06-26 GV

GHSA-3ff2-4v74-vhq8

Denial Of Service Information Disclosure Gv Lpclpc2011 2211 Geovision Inc

8.6

CVSS 3.1 · Vendor: GV

Severity by source

Vendor (GV) PRIMARY

8.6 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

vuln.today AI

8.6 HIGH

Unauthenticated network attack on the login path (AV:N/AC:L/PR:N/UI:N); reliable crash gives A:H while probabilistic format-string memory read/write yields only partial C:L/I:L.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (GV).

CVSS VectorVendor: GV

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 26, 2026 - 08:17 vuln.today

DescriptionCVE.org

An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper handling of externally controlled input during log message formatting in the login processing path. A remote attacker may exploit this vulnerability by sending crafted login data, potentially causing information disclosure, memory corruption, or a denial of service.

AnalysisAI

Unauthenticated format string flaw in the vlsvr service of GeoVision GV-LPC2011 and GV-LPC2211 license plate recognition cameras (firmware V1.12 and earlier) lets remote attackers send crafted login data that the device passes unsanitized into a log-formatting routine. Successful exploitation can leak memory contents, corrupt memory, or crash the service, with the high availability impact (CVSS 8.6) reflecting denial of service as the most reliable outcome. No public exploit identified at time of analysis and the issue is not listed in CISA KEV.

Technical ContextAI

GeoVision GV-LPC2011/GV-LPC2211 are dedicated license plate capture/recognition camera appliances; vlsvr is the network-facing service that processes login requests. The root cause is CWE-134 (Use of Externally-Controlled Format String): attacker-supplied login data reaches a formatting function (e.g., a printf-family call or logging wrapper) as part of the format string rather than as a data argument. Format specifiers such as %x/%s/%n in the input are then interpreted, allowing the attacker to read adjacent stack/memory (%x, %s) for information disclosure or write to memory (%n) for corruption - the classic mechanism behind both the info-leak and memory-corruption outcomes described.

RemediationAI

Consult the GeoVision security advisory at https://www.geovision.com.tw/cyber_security.php and upgrade GV-LPC2011/GV-LPC2211 firmware to a release later than V1.12 once the vendor publishes a fixed build - no exact patched version number was provided in the input, so Patch availability per vendor advisory should be verified directly with GeoVision. Until a confirmed fixed firmware is applied, restrict network reachability of the vlsvr service: place the cameras on an isolated management VLAN, block their login/management ports at the perimeter firewall so they are not exposed to the internet, and limit access to known operator IP addresses via ACLs (trade-off: legitimate remote management must traverse a VPN or jump host). Monitor the devices for unexpected reboots or service crashes as a signature of attempted exploitation.