Description
Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| GV-DSP_LPR_V3 | GeoVision / GV-DSP_LPR_V3 | 0 | affected |
| gv-dsp_lpr_v3_firmware | geovision / gv-dsp_lpr_v3_firmware | >= 0, < * | affected |
| GVLX 4 V2 | GeoVision / GVLX 4 V2 | 0 | affected |
| gvlx_4_v2_firmware | geovision / gvlx_4_v2_firmware | >= 0, < * | affected |
| GVLX 4 V3 | GeoVision / GVLX 4 V3 | 0 | affected |
| gvlx_4_v3_firmware | geovision / gvlx_4_v3_firmware | >= 0, < * | affected |
| GV-VS11 | GeoVision / GV-VS11 | 0 | affected |
| gv-vs11_firmware | geovision / gv-vs11_firmware | >= 0, < * | affected |
| GV-VS12 | GeoVision / GV-VS12 | 0 | affected |
| gv-vs12_firmware | geovision / gv-vs12_firmware | >= 0, < * | affected |