Gv-lpc2011 Firmware vulnerabilities

3 known vulnerabilities in Gv-lpc2011 Firmware from GeoVision. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  GV-LPC2011/LPC2211: Incorrect Privilege Assignment

  CVE-2026-42368May 4, 2026GeoVision

  A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute priviledged operation. An attacker can visit a webpage to trigger this vulnerability.

• 7.5 High severity

  GV-LPC2011/LPC2211: Predictable from Observable State

  CVE-2026-42365May 4, 2026GeoVision

  A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an authentication bypas. An attacker can bruteforce session cookies to trigger this vu

• 8.8 High severity

  GV-LPC2011/LPC2211: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-42364May 4, 2026GeoVisionEPSS 1.68%

  An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary command execution. An attacker can modify a configuration value to trigger this vu