CVE-2020-3931
GeoVision Door Access Control Device - Buffer overflow vulnerability
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command.
Un desbordamiento del búfer se presenta en la familia de dispositivos de Geovision Door Access Control, un atacante remoto no autenticado puede ejecutar un comando arbitrario
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-12-20 CVE Reserved
- 2020-07-08 CVE Published
- 2024-09-16 CVE Updated
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://www.acronis.com/en-us/blog/posts/backdoor-wide-open-critical-vulnerabilities-uncovered-geovision | Third Party Advisory | |
| https://www.twcert.org.tw/tw/cp-132-3754-b77d0-1.html | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Geovision Search vendor "Geovision" | Gv-as210 Firmware Search vendor "Geovision" for product "Gv-as210 Firmware" | < 2.21 Search vendor "Geovision" for product "Gv-as210 Firmware" and version " < 2.21" | - |
Affected
| in | Geovision Search vendor "Geovision" | Gv-as210 Search vendor "Geovision" for product "Gv-as210" | - | - |
Safe
|
| Geovision Search vendor "Geovision" | Gv-as410 Firmware Search vendor "Geovision" for product "Gv-as410 Firmware" | < 2.21 Search vendor "Geovision" for product "Gv-as410 Firmware" and version " < 2.21" | - |
Affected
| in | Geovision Search vendor "Geovision" | Gv-as410 Search vendor "Geovision" for product "Gv-as410" | - | - |
Safe
|
| Geovision Search vendor "Geovision" | Gv-as810 Firmware Search vendor "Geovision" for product "Gv-as810 Firmware" | < 2.21 Search vendor "Geovision" for product "Gv-as810 Firmware" and version " < 2.21" | - |
Affected
| in | Geovision Search vendor "Geovision" | Gv-as810 Search vendor "Geovision" for product "Gv-as810" | - | - |
Safe
|
| Geovision Search vendor "Geovision" | Gv-gf1921 Firmware Search vendor "Geovision" for product "Gv-gf1921 Firmware" | < 1.10 Search vendor "Geovision" for product "Gv-gf1921 Firmware" and version " < 1.10" | - |
Affected
| in | Geovision Search vendor "Geovision" | Gv-gf1921 Search vendor "Geovision" for product "Gv-gf1921" | - | - |
Safe
|
| Geovision Search vendor "Geovision" | Gv-as1010 Firmware Search vendor "Geovision" for product "Gv-as1010 Firmware" | < 1.32 Search vendor "Geovision" for product "Gv-as1010 Firmware" and version " < 1.32" | - |
Affected
| in | Geovision Search vendor "Geovision" | Gv-as1010 Search vendor "Geovision" for product "Gv-as1010" | - | - |
Safe
|
| Geovision Search vendor "Geovision" | Gv-gf1922 Firmware Search vendor "Geovision" for product "Gv-gf1922 Firmware" | < 1.10 Search vendor "Geovision" for product "Gv-gf1922 Firmware" and version " < 1.10" | - |
Affected
| in | Geovision Search vendor "Geovision" | Gv-gf1922 Search vendor "Geovision" for product "Gv-gf1922" | - | - |
Safe
|