CVE-2026-12850: CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection') in GeoVision Inc. GV-I/O Box 4E
CVE-2026-12850 is a critical OS command injection vulnerability in GeoVision Inc.'s GV-I/O Box 4E version 2.09. The vulnerability exists in the libNetSetObj.so library, specifically in a function that configures the network gateway without properly sanitizing input. An attacker can send a specially crafted network packet to the device's network-exposed services to execute arbitrary OS commands.
AI Analysis
Technical Summary
This vulnerability involves multiple OS command injection flaws in the libNetSetObj.so component of GeoVision GV-I/O Box 4E version 2.09. The function CNetSetObj::m_F_n_Set_Gate_way takes a gateway address string from network requests without sanitization and uses it directly in system calls to configure network routes. This allows an attacker to execute arbitrary OS commands remotely by sending crafted network packets to the DVRSearch service or the Network.cgi endpoint. The CVSS 3.1 score is 9.1, indicating critical severity with network attack vector, low attack complexity, high impact on confidentiality, integrity, and availability, and requiring high privileges.
Potential Impact
Successful exploitation allows remote authenticated attackers to execute arbitrary OS commands on the affected device, leading to full compromise of confidentiality, integrity, and availability. This could result in unauthorized control over network configuration and potentially the entire device.
Mitigation Recommendations
No official patch or remediation is currently available for this vulnerability. Users should monitor the vendor's advisory channels for updates. Until a fix is released, restrict network access to the affected services (DVRSearch and Network.cgi) to trusted users only and consider disabling these services if feasible to reduce exposure.
CVE-2026-12850: CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection') in GeoVision Inc. GV-I/O Box 4E
Description
CVE-2026-12850 is a critical OS command injection vulnerability in GeoVision Inc.'s GV-I/O Box 4E version 2.09. The vulnerability exists in the libNetSetObj.so library, specifically in a function that configures the network gateway without properly sanitizing input. An attacker can send a specially crafted network packet to the device's network-exposed services to execute arbitrary OS commands.
CVSS v3.1
Score 9.1critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves multiple OS command injection flaws in the libNetSetObj.so component of GeoVision GV-I/O Box 4E version 2.09. The function CNetSetObj::m_F_n_Set_Gate_way takes a gateway address string from network requests without sanitization and uses it directly in system calls to configure network routes. This allows an attacker to execute arbitrary OS commands remotely by sending crafted network packets to the DVRSearch service or the Network.cgi endpoint. The CVSS 3.1 score is 9.1, indicating critical severity with network attack vector, low attack complexity, high impact on confidentiality, integrity, and availability, and requiring high privileges.
Potential Impact
Successful exploitation allows remote authenticated attackers to execute arbitrary OS commands on the affected device, leading to full compromise of confidentiality, integrity, and availability. This could result in unauthorized control over network configuration and potentially the entire device.
Mitigation Recommendations
No official patch or remediation is currently available for this vulnerability. Users should monitor the vendor's advisory channels for updates. Until a fix is released, restrict network access to the affected services (DVRSearch and Network.cgi) to trusted users only and consider disabling these services if feasible to reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GV
- Date Reserved
- 2026-06-22T00:42:27.477Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a3b667deed863c81e4ac1aa
Added to database: 06/24/2026, 05:09:17 UTC
Last enriched: 06/24/2026, 05:24:09 UTC
Last updated: 06/24/2026, 05:29:03 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.