[0day-rubbish] GeoVision GV-TBL4700 V1.06 Authenticated command injection to root RCE via SNMPv3 user configuration (8.8)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-04 00:11 UTC
Importiert: 2026-09-04 00:48 UTC
Quelle-ID: full_disc
uid_hash: dea1ae5c3f063d37e879b30cf3aea582544ee11a2fe33edb4c13579f8b373a1b

Full Disclosure

Posted by disclosure via Fulldisclosure on Sep 03 0day Rubbish Research Team is publicly disclosing a vulnerability in GeoVision GV-TBL4700 V1.06.

Type: Authenticated command injection to root RCE via SNMPv3 user configuration (CWE-78)

CVSS: 8.8 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)

Impact: Root command execution on the IP camera / access-control device: video, credentials, configuration, and device

state under attacker control; a foothold inside the surveillance network....

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss