EUVD-2026-75311
GHSA-c6p4-m9j3-jj63
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Network-accessible ONVIF interface, any valid account sufficient (PR:L), no interaction needed; root execution yields full C/I/A impact on the device.
Primary rating from Vendor (GV).
CVSS VectorVendor: GV
Lifecycle Timeline
3DescriptionCVE.org
GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root.
AnalysisAI
Authenticated ONVIF command injection in GeoVision GV-LPC2211 V1.13 allows a low-privileged network attacker to execute arbitrary OS commands as root via the ConsumerReference.Address parameter of the ONVIF event subscription interface. The vulnerability stems from unsanitized user-controlled input passed directly to a shell interpreter on the device. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid ONVIF user account on the target GeoVision GV-LPCLPC2211 running firmware V1.13. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) accurately reflects the risk profile. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the GeoVision security advisory at https://www.geovision.com.tw/cyber_security.php for an updated firmware version addressing this vulnerability - no specific patched firmware version number is independently confirmed in the available data, so treat any version beyond V1.13 as candidate only until verified against the vendor bulletin. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: audit and restrict ONVIF account access to the minimum required personnel, enable network monitoring for unusual activity on affected devices, and document all current ONVIF credentials. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Certain EOL GeoVision devices have an OS Command Injection vulnerability. Rated critical severity (CVSS 9.8), this vulne
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Rated critical severity
A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. Rated critical
A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. Rated high severity (CVSS 7.5),
A XSS found in Advan VD-1 firmware versions up to 230. Rated medium severity (CVSS 6.1), this vulnerability is remotely
An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions
GV Edge Recording Manager (ERM) v2.3.1 improperly executes application components with SYSTEM-level privileges, allowing
In GeoVision GV-ADR2701 cameras, an attacker could edit the login response to access the web application. Rated critical
Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute ar
Unauthenticated remote control of GeoVision GV-LPC2211 license-plate-capture cameras (firmware V1.13) is possible becaus
OS command injection in GeoVision GV-LPC2011/LPC2211 firmware V1.13 allows an authenticated administrator to achieve roo
OS command injection in GeoVision GV-LPC2011/LPC2211 firmware V1.13 allows an authenticated administrator to execute arb
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today