CVE-2019-11064: Androvideo Vd 1 Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. An attacker can export system configuration which is not encrypted to get the administrator’s account and password in plain text via cgibin/ExportSettings.cgi?Export=1 without any authentication.

Affected products

• Androvideo Vd 1 Firmware: up to and including 230
• GeoVision Gv-VD8700 Firmware: up to and including 1.01
• GeoVision Gv-VR360 Firmware: up to and including 1.10

Published 2019-08-29. Last modified 2026-06-17.