GeoVision Web Interface Privilege Escalation Vulnerability Allowing Credential Leakage

A privilege escalation vulnerability has been identified in the Web Interface functionality, specifically within the ssi.cgi component, of GeoVision LPC2011 and LPC2211 versions 1.10. This vulnerability allows for the leakage of credentials through a specially crafted HTTP request. An attacker can exploit this issue by visiting a webpage that triggers the vulnerability.

Impact

Exploitation of this vulnerability could lead to unauthorized access to credentials, allowing an attacker to escalate privileges within the application or system.