ID
VAR-201802-1412
TITLE
Multiple remote vulnerabilities in Geovision IP camera devices
Trust: 0.6
DESCRIPTION
Geovision is a Taiwan-based company that specializes in digital security surveillance systems, providing core applications such as image capture, image analysis, image compression, and image processing to provide customers with smart applications and best-in-class monitoring solutions. The GV-BX1500 and GV-MFD1501 are two cameras from Geovision. The GeovisionIP camera device has leaked configuration information, username and password to modify admin privileges, and remote command execution vulnerabilities. The attacker can use the vulnerability to obtain all the configuration information of the device, obtain and modify the original account information and execute the command remotely, and successfully getshell.
Trust: 0.6
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | geovision | model: | gv-bx1500 | scope: | - | version: | - | Trust: 0.6 |
| vendor: | geovision | model: | gv-mfd1501 | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
PATCH
| title: | GeovisionIP camera device has multiple patches for remote vulnerabilities | url: | https://www.cnvd.org.cn/patchinfo/show/116075 | Trust: 0.6 |
EXTERNAL IDS
| db: | CNVD | id: | CNVD-2018-03053 | Trust: 0.6 |
REFERENCES
| url: | https://github.com/mcw0/poc/blob/master/geovision%20ip%20camera%20multiple | Trust: 0.6 |
SOURCES
| db: | CNVD | id: | CNVD-2018-03053 |
LAST UPDATE DATE
2022-05-04T09:33:54.240000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2018-03053 | date: | 2018-02-18T00:00:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2018-03053 | date: | 2018-02-09T00:00:00 |