Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-88277

GV-LPCLPC2011/2211 - ONVIF Subscribe Address Command Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GV

Description

GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GeoVision Inc. GV-LPCLPC2011/2211

Default version status: unaffected

  • 1.13affected
  • 1.14unaffected

References