GeoVision LPC2011/LPC2211 Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Web Interface functionality of GeoVision LPC2011 and LPC2211 versions 1.10. This vulnerability allows an attacker to execute privileged operations by sending a specially crafted HTTP request. The issue can be triggered by visiting a webpage that interacts with the vulnerable application.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, enabling attackers to perform actions or access resources that are normally restricted.

Remediation

Users are advised to check the GeoVision product download page for the latest firmware updates, provided the product is still supported.