Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a service running by default on the IOBox listening for UDP messages on port 10001. Any user on the network can send messages to this service and interact with it. Upon receiving a UDP message, the server reads at most 1460 bytes into a local buffer and a pointer to the buffer is stored in a global variable: #### DNS field stack overflow The following code is vulnerable to a stack overflow that is attacker-controlled: v8 = strlen(g_network_config->dns_addr); memcpy(&reply_buf[248], g_network_config->dns_addr, v8);
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
🛡️ GeoVision Hardware: Four Critical IoT Flaws The GV-I/O Box 4E smart I/O device accumulated four simultaneous CVSS 10.0 vulnerabilities: CVE-2026-12485, CVE-2026-12846, CVE-2026-12847, and CVE-2026-12848. These devices…
Post summary
The post announces four newly discovered critical IoT vulnerabilities (CVEs) for the GeoVision GV‑I/O Box 4E device with CVSS 10.0 scores.
📡 CVE-2026-12848: GeoVision GV-I/O Box 4E has a CVSS 10 buffer overflow in its DVRSearch service. No auth, no interaction, network-accessible. Full system compromise possible. Talos confirmed it. https://secalerts.co/vulnerability/CVE-2026-12848?utm_campaign=x https://t.co/lD3i18iArv
Post summary
GeoVision GV‑I/O Box 4E is vulnerable to a CVSS 10 buffer overflow in its DVRSearch service, enabling remote, unauthenticated full system compromise. The post does not indicate active exploitation, a PoC, or a patch.
🚨 CRITICAL - GeoVision GV-I/O Box 4E DVRSearch UDP stack buffer overflow (CVE-2026-12848) GeoVision GV-I/O Box 4E is vulnerable to a stack-based buffer overflow in its default DVRSearch service that listens for UDP messages on port 10001. The root cause is unsafe copying of the configured DNS address into a reply buffer using an unchecked length derived from strlen, enabling an attacker-controlled overwrite. An unauthenticated network attacker can exploit this by sending crafted UDP traffic to the exposed DVRSearch service to trigger the overflow. Successful exploitation can lead to remote compromise, including potential remote code execution and full loss of confidentiality, integrity, and availability. 👉 Affected: GeoVision GV-I/O Box 4E (DVRSearch service, UDP/10001; versions not specified) | Upgrade to vendor-fixed firmware (No fix yet - treat as suspicious)
Post summary
The GeoVision GV‑I/O Box 4E’s DVRSearch UDP service has a critical stack‑based buffer overflow that could allow remote code execution, yet no patch is available yet and only upgrading to vendor firmware is suggested.