Product by Geovision Inc.
Gv-lpc2011/lpc2211
24 known vulnerabilities in Gv-lpc2011/lpc2211 (Geovision Inc.), 0 of them actively exploited (CISA KEV).
Key figures
24
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-42364 | GeoVision LPC2011/LPC2211 Web Interface / DdnsSetting.cgi OS command injection vulnerability | 8.8 | |
| Critical | CVE-2026-88285 | GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service | 9.4 | |
| High | CVE-2026-88273 | GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection | 7.2 | |
| High | CVE-2026-88275 | GV-LPC2011/LPC2211 - Wireless WPA-PSK Command Injection | 7.2 | |
| High | CVE-2026-88274 | GV-LPC2011/LPC2211 - Wireless SSID Command Injection | 7.2 | |
| High | CVE-2026-88289 | GV-LPC2011/LPC2211 - Multiple Pre-Authentication Stack Buffer Overflows in VLSVR Request Handlers | 7.5 | |
| High | CVE-2026-88271 | GV-LPC2011/LPC2211 - SSVR Guest Configuration Overwrite and Administrative Credential Takeover | 8.8 | |
| High | CVE-2026-88287 | GV-LPC2011/LPC2211 -ONVIF Discovery Probe Scopes Stack-Frame Overflow Denial of Service | 7.5 | |
| High | CVE-2026-88272 | GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection | 7.2 | |
| High | CVE-2026-88290 | GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion | 7.5 | |
| High | CVE-2026-88286 | GV-LPC2011/LPC2211 - PTZ Connection-State Accept-Loop Denial of Service | 7.5 | |
| Medium | CVE-2026-88288 | GV-LPC2011/LPC2211 - Arbitrary File Read Through BKDownloadLink.cgi Symlink Creation | 6.5 | |
| Critical | CVE-2026-42368 | GeoVision LPC2011/LPC2211 Web Interface privilege escalation vulnerability | 9.9 | |
| Medium | CVE-2026-88270 | GV-LPC2011/LPC2211 - SSVR Guest Firmware-Mode Pre-Validation Service Teardown Denial of Service | 6.5 | |
| Medium | CVE-2026-88269 | GV-LPC2011/LPC2211 - SSVR Guest Configuration and Credential Disclosure | 6.5 | |
| Medium | CVE-2026-88283 | GV-LPC2011/LPC2211 - ONVIF CreateUsers Repeated-Element Stack-Frame Overflow Denial of Service | 4.9 | |
| Medium | CVE-2026-88280 | GV-LPC2011/LPC2211 - ONVIF SetUser Stack-Frame Overflow Denial of Service | 4.9 | |
| Medium | CVE-2026-88279 | GV-LPC2011/LPC2211 - ONVIF CreateUsers Username/Password Stack-Frame Overflow Denial of Service | 4.9 | |
| Medium | CVE-2026-88284 | GV-LPC2011/LPC2211 - ONVIF SetUser Repeated-Element Stack-Frame Overflow Denial of Service | 4.9 | |
| Medium | CVE-2026-88281 | GV-LPC2011/LPC2211 - ONVIF DeleteUsers Repeated-Element Stack Overflow Denial of Service | 4.9 | |
| High | CVE-2026-42365 | GeoVision LPC2011/LPC2211 Web Interface guessable session cookie vulnerability | 7.5 | |
| Medium | CVE-2026-42367 | GeoVision GV-LPC2011/LPC2211: Insufficiently Protected Credentials | 6.5 | |
| High | CVE-2026-7371 | GeoVision GV-LPC2011/LPC2211: Cross-site Scripting | 6.1 | |
| High | CVE-2026-42366 | GeoVision GV-LPC2011/LPC2211: Cross-site Scripting | 6.1 |