CVE-2020-3929: Usavisionsys GeoVision Gv-AS1010 Firmware

Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days.

GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages.

Affected products

• Usavisionsys GeoVision Gv-AS1010 Firmware: before 1.32 (fixed in 1.32)
• Usavisionsys GeoVision Gv-AS210 Firmware: before 2.21 (fixed in 2.21)
• Usavisionsys GeoVision Gv-AS410 Firmware: before 2.21 (fixed in 2.21)
• Usavisionsys GeoVision Gv-AS810 Firmware: before 2.21 (fixed in 2.21)
• Usavisionsys GeoVision Gv-GF192X Firmware: before 1.10 (fixed in 1.10)

Published 2020-06-12. Last modified 2026-06-17.