CVE-2020-3931criticalCWE-120

CVE-2020-3931: critical vulnerability in GeoVision Door Access Control Device

GeoVision Door Access Control Device - Buffer overflow vulnerability

Published · Updated

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 1.8%
exploitation probability
1.8%top 22% of all CVEs
observed exploitation
nono source reports it
Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
GeoVision · Door Access Control Device
Related CVEs — GeoVision Door Access Control Device

In the same product, most dangerous first.

CVE-2020-3928MEDIUMGeoVision Door Access Control Device - Hardcoded privileged passwordEPSS 0.9%CVE-2020-3929MEDIUMGeoVision Door Access Control Device - Shared cryptographic keysEPSS 0.5%CVE-2020-3930MEDIUMGeoVision Door Access Control Device - Information disclosure vulnerabilityEPSS 0.3%
References
https://www.acronis.com/en-us/blog/posts/backdoor-wide-open-critical-vulnerabilities-uncovered-geovisionhttps://www.twcert.org.tw/tw/cp-132-3754-b77d0-1.html