CVE-2026-57881: GV-LPC2011/LPC2211 - unauthorized stack-based buffer overflow vulnerability (vlsvr)

Synopsis

A stack-based buffer overflow exists in the vlsvr service on GeoVision GV-LPC2011 and GV-LPC2211 devices running firmware V1.12 and earlier. The vulnerability is reachable over the network without any authentication, triggered by sending crafted login data with an overly long input field that exceeds the bounds of a fixed-size stack buffer. Successful exploitation causes memory corruption, which an attacker can leverage to crash the service, deny legitimate access, or execute arbitrary code on the device. A patched-image rebuild at firmware version 1.13 is available on HarborGuard for affected environments.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the vlsvr service over the network; the CVSS vector specifies AV:N, meaning the vulnerable component is exposed to network-reachable traffic.

• AuthenticationNot required

  No credentials are needed; PR:N confirms the attacker can send crafted login data to the service without holding any account or session.

• Victim interactionNot required

  No user action is required; UI:N means the attacker triggers the overflow entirely by sending a malformed request to the service.

• Attack complexityDetail

  Attack complexity is low (AC:L), meaning the exploit is reliable and imposes no special conditions such as race windows or specific memory layout requirements.

Blast Radius

• The attacker can crash the vlsvr service, making the device unavailable for its access-control or license-plate-capture function.
• The attacker can corrupt stack memory in a way that allows overwriting the return address and redirecting execution to attacker-supplied code, achieving arbitrary code execution on the device.
• With code execution, the attacker reads stored configuration, credentials, or captured image data held by the device.
• With code execution, the attacker modifies device configuration, disables security policies, or pivots to other systems on the same network segment.