Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a service running by default on the IOBox listening for UDP messages on port 10001. Any user on the network can send messages to this service and interact with it. Upon receiving a UDP message, the server reads at most 1460 bytes into a local buffer and a pointer to the buffer is stored in a global variable: #### IP field stack overflow The following code is vulnerable to a stack overflow that is attacker-controlled: v3 = strlen(g_network_config->ip_addr); memcpy(&reply_buf[36], g_network_config->ip_addr, v3);
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-24 | 1 | Disclosure1 |
| 2026-06-28 | 1 | Disclosure1 |
| 2026-06-29 | 1 | Disclosure1 |
| 2026-07-03 | 1 | General1 |
| 2026-08-31 | 2 | Exploit2 |
🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2025-71338 - EXPLOIT CVE-2025-71389 - EXPLOIT CVE-2026-0092 - EXPLOIT CVE-2026-0848 - EXPLOIT CVE-2026-12485 - EXPLOIT ..🧵👇
Post summary
The post lists multiple CVEs labeled with "EXPLOIT", indicating they are considered exploit‑able, but no further details or code are provided.
🛡️ GeoVision Hardware: Four Critical IoT Flaws The GV-I/O Box 4E smart I/O device accumulated four simultaneous CVSS 10.0 vulnerabilities: CVE-2026-12485, CVE-2026-12846, CVE-2026-12847, and CVE-2026-12848. These devices…
Post summary
The post announces four critical CVSS 10.0 vulnerabilities in GeoVision IoT devices, but provides no details about exploits, patches, or active attacks.
Warning: #GeoVision GV-I/O Box 4E control interface for surveillance, and other IoT devices, contains a critical vulnerability dubbed #CVE-2026-12485 CVSS 10.0. Unauthenticated attackers could craft UDP messages and trigger a stack overflow, leading to #RCE. #Patch #Patch #Patch
Post summary
The post discloses CVE‑2026‑12485 as a critical stack‑overflow vulnerability in GeoVision devices that can be triggered via crafted UDP packets, leading to remote code execution, and hints at a patch being available.
🚨 CRITICAL - Unauthenticated UDP stack buffer overflow in DVRSearch service (CVE-2026-12485) GV-I/O Box 4E exposes a default UDP service (DVRSearch) on port 10001 that accepts messages from any network user, enabling a remotely reachable flaw in the device’s network service. The issue is a stack-based buffer overflow caused by unsafe copying of attacker-controlled IP-field data using strlen and memcpy into a fixed-size stack buffer. An attacker can exploit this by sending a crafted UDP packet to port 10001 with an overlong IP field, requiring no authentication and only network reachability to the device. Successful exploitation can lead to remote code execution and full device compromise, with severe confidentiality, integrity, and availability impact. 👉 Affected: GV-I/O Box 4E (default DVRSearch UDP service on port 10001; versions not specified) | Upgrade to Vendor patch not specified (No fix yet - treat as suspicious)
Post summary
The post announces a critical DVRSearch UDP stack buffer overflow in GV‑I/O Box 4E that allows unauthenticated remote code execution, explains how to trigger it with an overlong IP field, and notes that no vendor patch is yet available.
[CVE] CVE-2026-12485 [CRITICAL/PoC] #GeoVision GV-I/O Box DVRSearch buffer overflow vulnerabilities in CMD_IP_SET ... ⚠️ Recorded Exploit Available 🔗 https://exploitgrid.net/cve/CVE-2026-12485
Post summary
An announced critical buffer overflow in GeoVision DVRSearch (CVE‑2026‑12485) now has a publicly available PoC and exploit script on ExploitGrid, with no evidence yet of active exploitation or patch availability.
📡 CVSS 10 buffer overflow in GeoVision GV-I/O Box 4E — unauthenticated, network-exploitable via UDP. Talos confirmed: CVE-2026-12485 hits the CMD_IP_SET command in DVRSearch. Full compromise, no user interaction needed. #IoTSecurity #CVE https://secalerts.co/vulnerability/CVE-2026-12485?utm_campaign=x https://t.co/TU2Xmq7Mc9
Post summary
Talos has disclosed a CVSS 10 buffer overflow in GeoVision GV‑I/O Box 4E that allows unauthenticated UDP exploitation, leading to full system compromise; no patches or PoC information are provided.