Privilege Escalation Vulnerability in GeoVision LPC2011/LPC2211
CVE-2026-42367

6.5MEDIUM

Key Information:

Vendor

Geovision Inc.

Status
Gv-lpc2011/lpc2211
Vendor
CVE Published:
4 May 2026

What is CVE-2026-42367?

A privilege escalation issue has been identified in the Web Interface / ssi.cgi functionality of the GeoVision LPC2011 and LPC2211 products. This vulnerability can be exploited through a specially crafted HTTP request, enabling unauthorized users to potentially leak sensitive credentials. Attackers can trigger this vulnerability by simply visiting a compromised webpage, putting user data at risk.

Affected Version(s)

GV-LPC2011/LPC2211 Linux V1.10

GV-LPC2011/LPC2211 Linux V1.20

References

https://www.geovision.com.tw/cyber_security.php
vendor-advisory
https://talosintelligence.com/vulnerability_reports/
third-party-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Philippe Laulheret of Cisco Talos.
Kelly Patterson of Cisco Talos.
Martin Zeiser of Cisco Talos.
.