What is the CVSS score of EUVD-2026-39628?

EUVD-2026-39628 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 1.0%.

Which versions of GeoVision GV-LPC2011 are affected by EUVD-2026-39628?

GeoVision license plate recognition appliances (GV-LPC2011, GV-LPC2211) with firmware V1.12 and earlier contain an unauthenticated remote file read vulnerability allowing attackers to retrieve…

How to fix or mitigate EUVD-2026-39628?

Within 24 hours: Identify and document all GV-LPC2011 and GV-LPC2211 appliances on the network, noting firmware versions. Within 7 days: Restrict network access through firewall rules and network segmentation-isolate devices to management VLANs or trusted networks only; disable remote access if not operationally required. Within 30 days: Monitor GeoVision security advisories for firmware patches (target V1.13+); establish contingency plan for device replacement or retirement if patch timeline extends beyond risk tolerance.

GeoVision GV-LPC2011 EUVD-2026-39628

| CVE-2026-57872 HIGH

Path Traversal (CWE-22)

2026-06-26 GV

GHSA-pwf5-hg39-g9g9

Information Disclosure Path Traversal Gv Lpclpc2011 2211

7.5

CVSS 3.1 · Vendor: GV

Severity by source

Vendor (GV) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

7.5 HIGH

Unauthenticated remote HTTP request (AV:N/AC:L/PR:N/UI:N) yields arbitrary file read, so C:H with no integrity or availability impact and unchanged scope.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (GV).

CVSS VectorVendor: GV

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jun 26, 2026 - 08:15 vuln.today

DescriptionCVE.org

An unauthenticated directory traversal vulnerability exists in get_fcont.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient validation of user-supplied file path input before the requested file is accessed by the CGI component. A remote attacker may exploit this vulnerability by sending a crafted request to read arbitrary files accessible to the affected process, resulting in information disclosure.

AnalysisAI

Arbitrary file read in GeoVision GV-LPC2011 and GV-LPC2211 license plate recognition appliances (firmware V1.12 and earlier) lets a remote, unauthenticated attacker traverse the filesystem via the get_fcont.cgi endpoint and retrieve any file readable by the CGI process. Because the CGI fails to validate the user-supplied file path, a single crafted HTTP request can disclose configuration files, credentials, or other sensitive data. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Identify exposed GeoVision LPR web interface

Delivery

Send crafted request to get_fcont.cgi

Exploit

Inject path-traversal sequence in file parameter

Execution

Bypass directory restriction

Persist

Read arbitrary readable file

Impact

Exfiltrate sensitive configuration or credentials

Access

Identify exposed GeoVision LPR web interface

Delivery

Send crafted request to get_fcont.cgi

Exploit

Inject path-traversal sequence in file parameter

Execution

Bypass directory restriction

Persist

Read arbitrary readable file

Impact

Exfiltrate sensitive configuration or credentials

Vulnerability AssessmentAI

Exploitation	Exploitation requires only that the GeoVision GV-LPC2011/GV-LPC2211 web/CGI interface (specifically the get_fcont.cgi endpoint) be network-reachable from the attacker; the CVSS vector AV:N/AC:L/PR:N/UI:N confirms no authentication, no special privileges, and no user interaction are needed against default configurations. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	All signals point in a consistent direction. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker scans for internet-exposed GeoVision LPR appliances and sends a crafted HTTP request to get_fcont.cgi with a traversal payload (e.g., a file-path parameter containing ../../ sequences) pointing at a sensitive file such as a password or configuration file. The CGI reads and returns the file contents without any authentication, handing the attacker credentials or configuration data that can enable deeper compromise. …
Remediation	Upgrade the device firmware to the first release after V1.12 as published by GeoVision; consult the vendor advisory at https://www.geovision.com.tw/cyber_security.php for the exact patched version, since no precise fix version is confirmed in the available data (No vendor-released patch version independently confirmed at time of analysis). … Detailed patch versions, workarounds, and compensating controls in full report.