Perceptive Security
SOC/SIEM Consultancy
An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can …
Published:
3 May 2026 at 22:00:00
Alert date:
4 May 2026 at 02:02:31
Source:
nvd.nist.gov
Mobile & IoT, Network Infrastructure
A command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 version 1.10. The vulnerability allows attackers to execute arbitrary commands by crafting malicious DDNS configuration values. This affects the DDNS (Dynamic DNS) settings component of the affected GeoVision devices. Successful exploitation requires an attacker to modify configuration values to trigger the command injection. The vulnerability enables arbitrary command execution on the affected systems.
Technical details
Mitigation steps:
Affected products:
GeoVision LPC2011
GeoVision LPC2211
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2026-42364
https://talosintelligence.com/vulnerability_reports/
https://www.geovision.com.tw/cyber_security.php
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.