GeoVision security advisory (AV26-913)
GeoVision's GV-LPC2011 and LPC2211 cameras have a flaw that lets attackers send a special video file to crash the camera's software. This happens only on firmware version 1.13 and does not let attackers take control or steal data.
- Severity
- Not scoredNo CVSS score recorded
- Fix
- Not confirmed
- Exploited
- Not confirmedNo confirmation recorded
How it works
- An attacker sends a specially built video file to the camera's video upload feature.
- The camera's software tries to process it but crashes instead.
- This only happens on firmware version 1.13.
What to do
If you own or manage a GeoVision GV-LPC2011 or LPC2211 camera, check its firmware version by opening the camera's web interface and looking for the firmware number. If it says 1.13, you are affected.
Wait for an official firmware update from GeoVision. Check the GeoVision support site for the latest firmware version and install it. Do not use firmware 1.13.
Technical details
Serial number: AV26-913 Date: Septembre 11, 2026 As of September 10, 2026, GeoVision is affected by vulnerabilities in the following product:: GV-LPC2011/LPC2211 Firmware version 1.13 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.