critical9.9
CVE-2026-42364
An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10.
Impact
An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary command execution. An attacker can modify a configuration value to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Geovision | Gv-Lpc2011 Firmware | Version 1.10 |
| Geovision | Gv-Lpc2211 Firmware | Version 1.10 |