CVE-2026-57877: GV-LPC2011/LPC2211 - unauthorized format string vulnerability (vlsvr)
An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper handling of externally controlled input during log message formatting in the login processing path. A remote attacker may exploit this vulnerability by sending crafted login data, potentially causing information disclosure, memory corruption, or a denial of service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-57877?
The severity of CVE-2026-57877 is high with a CVSS score of 8.6.
How do I fix CVE-2026-57877?
To fix CVE-2026-57877, update to GeoVision GV-LPC2011 and GV-LPC2211 V1.13 or later, which addresses the vulnerability.
What systems are affected by CVE-2026-57877?
CVE-2026-57877 affects GeoVision GV-LPC2011 and GV-LPC2211 versions prior to V1.12.
What type of vulnerability is CVE-2026-57877?
CVE-2026-57877 is an unauthorized format string vulnerability that can be exploited via improper log message formatting.
Can CVE-2026-57877 be exploited remotely?
Yes, CVE-2026-57877 can be exploited remotely by an attacker due to its unauthenticated nature.