CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-3931
Critical (9.8) in geovision. EPSS 1.8% chance of exploitation in the next 30 days.
Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command.
Severity
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- geovision:gv-as1010_firmware
- geovision:gv-as210_firmware
- geovision:gv-as410_firmware
- geovision:gv-as810_firmware
- geovision:gv-gf1921_firmware
- geovision:gv-gf1922_firmware
References
- https://www.acronis.com/en-us/blog/posts/backdoor-wide-open-critical-vulnerabilities-uncovered-geovision
- https://www.twcert.org.tw/tw/cp-132-3754-b77d0-1.html
- https://www.acronis.com/en-us/blog/posts/backdoor-wide-open-critical-vulnerabilities-uncovered-geovision
- https://www.twcert.org.tw/tw/cp-132-3754-b77d0-1.html