An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary command execution. An attacker can modify a configuration value to trigger this vulnerability.
An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary command execution. An attacker can modify a configuration value to trigger this vulnerability.
Why this VPI (explainable, experimental)
VPI breakdown
| Impact | 99.00 |
| Exploitation signal(No additional exploitation signal) | ×1.00 |
| VPI | 99.00 |
VPI formula vpi-v1