What is the CVSS score of CVE-2026-57881?

CVE-2026-57881 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of GeoVision GV-LPC2011 are affected by CVE-2026-57881?

GeoVision GV-LPC2011 and GV-LPC2211 license plate recognition cameras contain a critical, unauthenticated remote code execution vulnerability (CVSS 9.8) affecting perimeter security monitoring…

How to fix or mitigate CVE-2026-57881?

24 hours: Identify all affected cameras (GV-LPC2011, GV-LPC2211, firmware V1.12 or earlier) via inventory system and isolate from untrusted networks; restrict login-service (vlsvr) access to administrative hosts only via firewall rules. 7 days: Segment cameras to isolated VLAN; disable vlsvr remote access and require VPN for administration; open vendor support case with GeoVision for patch timeline. 30 days: Evaluate replacement units with confirmed patched firmware or transition to ONVIF-compliant hardware; document business continuity plan for loss of affected cameras; schedule decommissioning if patch not available.

GeoVision GV-LPC2011 CVE-2026-57881

EUVD-2026-39637 CRITICAL

Stack-based Buffer Overflow (CWE-121)

2026-06-26 GV

GHSA-45jw-wjqw-9fq9

RCE Buffer Overflow Denial Of Service Stack Overflow Gv Lpclpc2011 2211 Geovision Inc

9.8

CVSS 3.1 · Vendor: GV

Severity by source

Vendor (GV) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

9.8 CRITICAL

Unauthenticated network-reachable login service with low-complexity over-length input (AV:N/AC:L/PR:N/UI:N); memory corruption can yield code execution affecting C/I/A high.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (GV).

CVSS VectorVendor: GV

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 26, 2026 - 08:18 vuln.today

DescriptionCVE.org

An unauthenticated stack-based buffer overflow vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient length validation when processing remote login data. A remote attacker may exploit this vulnerability by sending crafted login data with overly long input, resulting in memory corruption, denial of service, or potentially arbitrary code execution.

AnalysisAI

Remote unauthenticated stack-based buffer overflow in the vlsvr login service of GeoVision GV-LPC2011 and GV-LPC2211 license plate capture cameras (firmware V1.12 and earlier) lets a remote attacker corrupt memory by sending an over-length login field, enabling denial of service and potentially arbitrary code execution. The flaw requires no authentication and no user interaction (CVSS 9.8). No public exploit identified at time of analysis, and it is not listed in CISA KEV.

Technical ContextAI

The affected component is vlsvr, the network login-handling service running on GeoVision GV-LPC series license plate recognition (LPR) cameras - purpose-built edge surveillance/ITS appliances typically deployed at parking facilities, tolling, and access-control checkpoints. The root cause is CWE-121 (Stack-based Buffer Overflow): the service copies attacker-supplied remote login data into a fixed-size stack buffer without validating the input length, so an over-long value overruns the buffer and overwrites adjacent stack memory (saved registers/return address). On embedded ARM/Linux devices of this class, such overruns frequently lack modern mitigations (stack canaries, ASLR, NX may be absent or inconsistent), which raises the likelihood that corruption can be steered from a crash toward controlled execution. The CPE cpe:2.3:a:geovision_inc.:gv-lpclpc2011/2211:*:*:*:*:*:*:*:* identifies the GV-LPC2011/2211 models as the affected products.

RemediationAI

No vendor-released patch version is identified in the available data; consult the GeoVision security advisory at https://www.geovision.com.tw/cyber_security.php for a firmware build later than V1.12 and upgrade GV-LPC2011/GV-LPC2211 devices as soon as one is published. Until a fixed firmware is confirmed and applied, restrict reachability of the vlsvr login service by placing the cameras on an isolated management VLAN and blocking their login/management port at the network perimeter so only trusted hosts can connect (trade-off: legitimate remote administration must then go through a VPN or jump host); enforce strict ACLs or firewall rules limiting access to known operator IPs (trade-off: dynamic/remote operators need IP allowlist maintenance); and disable any internet exposure or port-forwarding to these devices (trade-off: loss of direct remote viewing/management). Monitor the GeoVision page for the exact patched version and do not assume any specific fixed number, as none was provided.