9.4
CVE-2026-88285
- EPSS 0.27%
- Veröffentlicht 10.09.2026 08:24:15
- Zuletzt bearbeitet 10.09.2026 16:18:10
- Erkennungen
GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service
GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerGeoVision Inc.
≫
Produkt
GV-LPC2011/LPC2211
Default Statusunaffected
Version
1.13
Status
affected
Version
1.14
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.27% | 0.196 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 0df08a0e-a200-4957-9bb0-084f562506f9 | 9.4 | 3.9 | 5.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
|
CWE-306 Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
https://www.geovision.com.tw/cyber_security.php