Description (CNA)
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GeoVision / GV_DSP_LPR_V2 | affected all |
| GeoVision / GV_IPCAMD_GV_BX1500 | affected all |
| GeoVision / GV_IPCAMD_GV_CB220 | affected all |
| GeoVision / GV_IPCAMD_GV_EBL1100 | affected all |
| GeoVision / GV_IPCAMD_GV_EFD1100 | affected all |
| GeoVision / GV_IPCAMD_GV_FD2410 | affected all |
| GeoVision / GV_IPCAMD_GV_FD3400 | affected all |
| GeoVision / GV_IPCAMD_GV_FE3401 | affected all |
| GeoVision / GV_IPCAMD_GV_FE420 | affected all |
| GeoVision / GV-VS14_VS14 | affected all |
| GeoVision / GV_VS03 | affected all |
| GeoVision / GV_VS2410 | affected all |
| GeoVision / GV_VS28XX | affected all |
| GeoVision / GV_VS216XX | affected all |
| GeoVision / GV VS04A | affected all |
| GeoVision / GV VS04H | affected all |
| GeoVision / GVLX 4 V2 | affected all |
| GeoVision / GVLX 4 V3 | affected all |
| GeoVision / GV_IPCAMD_GV_BX130 | affected all |
| GeoVision / GV_GM8186_VS14 | affected all |
CWE
CWE-78
References
- https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html
- https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html
ADP enrichment
No English description supplied.
No English description supplied.