VulnSocial

CVE-2026-12847Disclosure

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a service running by default on the IOBox listening for UDP messages on port 10001. Any user on the network can send messages to this service and interact with it. Upon receiving a UDP message, the server reads at most 1460 bytes into a local buffer and a pointer to the buffer is stored in a global variable: #### Gateway field stack overflow The following code is vulnerable to a stack overflow that is attacker-controlled: v7 = strlen(g_network_config->gateway); memcpy(&reply_buf[216], g_network_config->gateway, v7);

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked 2d ago at 1 mentions (2026-06-24); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-06-24: 1Mentions · 2026-06-26: 1Mentions · 2026-07-03: 1Patch / Workaround · 2026-06-24: 1Technical Details · 2026-06-24: 1Technical Details · 2026-06-26: 1Technical Details · 2026-07-03: 106-2406-2607-03
Signal classification1 categories
Disclosure
3100.0%
Referenced assets1 URL
By indicator
Full discourse3 posts
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    🛡️ GeoVision Hardware: Four Critical IoT Flaws The GV-I/O Box 4E smart I/O device accumulated four simultaneous CVSS 10.0 vulnerabilities: CVE-2026-12485, CVE-2026-12846, CVE-2026-12847, and CVE-2026-12848. These devices…

    Post summary

    The statement announces four CVE-2026‑123xx vulnerabilities with CVSS 10.0 for GeoVision GV‑I/O Box 4E, providing only the severity scores and CVE identifiers, without any PoC, exploit, or patch information.

    1000045
    84 followersView on X
  • Upwind Security MDR@UpwindMDR
    Disclosure

    🚨 CRITICAL - GeoVision GV-I/O Box 4E DVRSearch UDP stack overflow (CVE-2026-12847) GeoVision GV-I/O Box 4E exposes a default UDP service (DVRSearch) on port 10001 that processes unauthenticated discovery/configuration messages from the local network. The issue is a stack-based buffer overflow caused by unsafe length handling: attacker-controlled data length is derived via strlen() and then copied with memcpy into a fixed-size reply buffer. An attacker on the same LAN can exploit this by sending a crafted UDP packet with an overlong “gateway” field to overflow the stack, with no credentials required. Successful exploitation can lead to remote code execution, full device compromise, and a foothold for lateral movement inside the network. 👉 Affected: GeoVision GV-I/O Box 4E (all versions with DVRSearch UDP/10001 enabled) | Upgrade to Vendor patch (not yet specified) or disable/ACL UDP 10001 immediately if no fix is available

    Post summary

    GeoVision DVRSearch UDP stack overflow (CVE-2026-12847) permits unauthenticated remote code execution, and the advisories recommend disabling the UDP service or applying a forthcoming vendor patch.

    0001082
    226 followersView on X
  • SecAlerts@SecAlertsCo
    Disclosure

    📡 GeoVision GV-I/O Box 4E: CVSS 10 buffer overflow in DVRSearch, a UDP service running by default. No auth, no interaction, full system compromise. Talos confirmed. CVE-2026-12847 https://secalerts.co/vulnerability/CVE-2026-12847?utm_campaign=x https://t.co/AJZO6B6jD3

    Post summary

    GeoVision GV‑I/O Box 4E is vulnerable to CVE‑2026‑12847, a CVSS 10 buffer overflow in the DVRSearch UDP service that allows full system compromise without authentication, confirmed by Talos but with no PoC, exploit code, or patch details shared.

    00000107
    846 followersView on X

Explore more

Back to dashboard