title: GeoVision Door Access Control Device - Shared cryptographic keys
description: GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages.
problem types: Shared cryptographic keys
affected:
{
product: Door Access Control Device
vendor: GeoVision
versions:
lessThanOrEqual: 2.21, status: affected, version: GV-AS210, versionType: custom
lessThanOrEqual: 2.21, status: affected, version: GV-AS410, versionType: custom
lessThanOrEqual: 2.21, status: affected, version: GV-AS810, versionType: custom
lessThanOrEqual: 1.10, status: affected, version: GV-GF192x, versionType: custom
lessThanOrEqual: 1.32, status: affected, version: GV-AS1010, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
]
solutions: Update to version 2.22 in GV-AS210
Update to version 2.22 in GV-AS410
Update to version 2.22 in GV-AS810
Update to version 1.22 in GV-GF192x
Update to version 1.33 in GV-AS1010