GeoVision vulnerabilities
We track 70 vulnerabilities in GeoVision products across 60+ products. 70 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on November 10, 2026.
Latest GeoVision vulnerabilities
- 9.8 Critical severity
GV-LPCLPC2011/2211: Stack-based Buffer Overflow
An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when parsing RTSP Digest authentication fields. A remote attacker
- 9.8 Critical severity
GV-LPCLPC2011/2211: Stack-based Buffer Overflow
An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing RTSP custom authentication data. A remote attacker
- 9.8 Critical severity
GV-LPCLPC2011/2211: Stack-based Buffer Overflow
An unauthenticated stack-based buffer overflow vulnerability exists in thttpd in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing web request parameters in a specific request pat
- 8.6 High severity
GV-LPCLPC2011/2211: Use of Externally-Controlled Format String
An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper handling of externally controlled input during log message formatting in the login processing path.
- 7.5 High severity
GV-LPCLPC2011/2211: Out-of-bounds Write
An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing HTTP request body data. A remote attacker may exploit
- 7.5 High severity
GV-LPCLPC2011/2211: NULL Pointer Dereference
An unauthenticated NULL pointer dereference vulnerability exists in the HTTP request parsing logic of multiple CGI components in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper validation of required HTTP request
- 7.5 High severity
GV-LPCLPC2011/2211: Buffer Copy without Checking Size of Input
An unauthenticated buffer overflow vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when parsing filename values in multipart upload data. A remot
- 7.5 High severity
GV-LPCLPC2011/2211: NULL Pointer Dereference
An unauthenticated NULL pointer dereference vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper validation of multipart upload headers when processing certificate-relate
- 7.5 High severity
GV-LPCLPC2011/2211: Improper Limitation of a Pathname to a Restricted Directory
An unauthenticated directory traversal vulnerability exists in get_fcont.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient validation of user-supplied file path input before the requested file is accessed
- 9.1 Critical severity
GV-I/O Box 4E: Improper Neutralization of Special Elements used in an OS Command
Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVision GV-I/O Box 4E 2.09. A specially crafted network packet can lead to command execution. An attacker can send a network request to trigger this vulnerability. `l
- 9.1 Critical severity
GV-I/O Box 4E: Improper Neutralization of Special Elements used in an OS Command
Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVision GV-I/O Box 4E 2.09. A specially crafted network packet can lead to command execution. An attacker can send a network request to trigger this vulnerability. `l
- 9.1 Critical severity
GV-I/O Box 4E: Improper Neutralization of Special Elements used in an OS Command
Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVision GV-I/O Box 4E 2.09. A specially crafted network packet can lead to command execution. An attacker can send a network request to trigger this vulnerability. `l
- 10.0 Critical severity
GV-I/O Box 4E: Stack-based Buffer Overflow
GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a service running by default on the IOBox listening for UDP messages on port 10001. Any user on the network can send message
- 10.0 Critical severity
GV-I/O Box 4E: Stack-based Buffer Overflow
GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a service running by default on the IOBox listening for UDP messages on port 10001. Any user on the network can send message
- 10.0 Critical severity
GV-I/O Box 4E: Stack-based Buffer Overflow
GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a service running by default on the IOBox listening for UDP messages on port 10001. Any user on the network can send message
- 9.1 Critical severity
GV-I/O Box 4E: Improper Neutralization of Special Elements used in an OS Command
Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVision GV-I/O Box 4E 2.09. A specially crafted network packet can lead to command execution. An attacker can send a network request to trigger this vulnerability. `l
- 10.0 Critical severity
GV-I/O Box 4E: Stack-based Buffer Overflow
GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a service running by default on the IOBox listening for UDP messages on port 10001. Any user on the network can send message
- 8.8 High severity
ASManager: Improper Control of Generation of Code
A remote code execution vulnerability exists in Notification Settings on GeoVision GV-ASWeb 6.2.0. An authenticated user with System Setting permissions can execute arbitrary commands on the server by sending a crafted HTTP POST request to the ASWebCommon.srf
- 9.0 Critical severity
GV-VMS V20.0.2: Out-of-bounds Write
A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulner
- 9.3 Critical severity
GV-IP Device Utility: Reliance on Security Through Obscurity
An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak. An attacker can listen to broadcast messages to trigger this vulner
- 9.8 Critical severity
GV-VMS V20.0.2: Out-of-bounds Write
A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulner
- 10.0 Critical severity
GV-VMS V20.0.2: Out-of-bounds Write
GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other security devices. It is a native application accessed locally, but it is also possible to enable remote access via the "WebCam Server" feature. Onc
- 9.9 Critical severity
GV-LPC2011/LPC2211: Incorrect Privilege Assignment
A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute priviledged operation. An attacker can visit a webpage to trigger this vulnerability.
- 7.5 High severity
GV-LPC2011/LPC2211: Predictable from Observable State
A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an authentication bypas. An attacker can bruteforce session cookies to trigger this vu
- 8.8 High severity
GV-LPC2011/LPC2211: Improper Neutralization of Special Elements used in an OS Command
An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary command execution. An attacker can modify a configuration value to trigger this vu
- 9.3 Critical severity
GV-IP Device Utility: Reliance on Security Through Obscurity
An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak. An attacker can listen to broadcast messages to trigger this vulner
- 10.0 Critical severity
GV-Edge Recording Manager: Execution with Unnecessary Privileges
GV Edge Recording Manager (ERM) v2.3.1 improperly runs application components with SYSTEM-level privileges, allowing any local user to gain full control of the operating system. During installation, ERM creates a Windows service that runs under the LocalSystem
- 9.8 Critical severity
GeoVision Devices OS Command Injection Exploited
Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by
- 9.8 Critical severity
GeoVision Devices OS Command Injection Exploited
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.
- 9.8 Critical severity
Gv-edge Recording Manager: Incorrect Default Permissions
An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions within the default installation and allows attackers to execute arbitrary code and gain escalated privileges.