GEOVISION disclosed 10 vulnerabilities affecting its GV-LPC2011 and GV-LPC2211 license plate cameras, all of which impact firmware V1.12 and earlier. These flaws are unauthenticated and can be exploited remotely, with four rated at 9.8 on the CVSS scale, posing a risk of remote code execution. The vulnerabilities could allow an attacker to corrupt memory and execute code, jeopardizing not only the cameras but also their surrounding network. GeoVision has released firmware V1.13 to address these issues, and users are urged to update their devices to mitigate potential exploits.
GeoVision fixes 10 flaws in license plate cameras after RCE risk
CyberSIXT Evidence Panel
Primary Source
dlcdn.geovision.com.tw
Article by CyberSIXT