A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to credentials leak. An attacker can visit a webpage to trigger this vulnerability.CreditsPhilippe Laulheret of Cisco Talos.Kelly Patterson of Cisco Talos.Martin Zeiser of Cisco Talos.Referenceshttps://www.geovision.com.tw/cyber_security.phphttps://talosintelligence.com/vulnerability_reports/
