CVE-2020-3928

—

CVSS 3.1

9.8 critical

EPSS

<1%p57

Published

Jun 12, 2020 (Jun 12, 2020)

Modified

Jun 17, 2026

Description

GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices.

Vendors: usavisionsys
Products: geovision gv-as210 firmware, geovision gv-as410 firmware, geovision gv-as810 firmware, geovision gv-as1010 firmware, geovision gv-gf192x firmware
Weakness: CWE-798
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news1 stories

Critical Bugs and Backdoor Found in GeoVision's Fingerprint and Card Scanners

The Hacker NewsJun 25, 10:15 UTC · Jun 25, 2020Malware CVE-2020-3928 CVE-2020-3929 CVE-2020-3930

60