Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-88278

GV-LPCLPC2011/2211 - ONVIF WS-Security PasswordDigest Replay

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GV

Description

GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GeoVision Inc. GV-LPCLPC2011/2211

Default version status: unaffected

  • 1.13affected
  • 1.14unaffected

References