Records106All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical34CVSS 9.0–10.0
CVSS high52CVSS 7.0–8.9
Exploited now
GeoVision records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 46
An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.01678 · Published 2026-05-04 · Fixed in 1.12 CWE-78
Priority MEDIUM 43
A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00363 · Published 2026-05-04 · Fixed in 1.2 CWE-266
Priority LOW 37
A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00344 · Published 2026-05-04 · Fixed in 1.12 CWE-341
Priority LOW 32
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.
CVSS 3.1HIGH 7.4· Network · No auth · User interaction · EPSS 0.00205 · Published 2026-05-04 · Fixed in V1.20 CWE-79
Priority LOW 32
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.
CVSS 3.1HIGH 7.4· Network · No auth · User interaction · EPSS 0.00205 · Published 2026-05-04 · Fixed in V1.20 CWE-79
Priority LOW 31
A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00283 · Published 2026-05-04 · Fixed in V1.20 CWE-522
THREATIST.IORead the docs