PT-2026-3167 · Geovision · Geowebserver

Published 2026-01-15 · Updated 2026-01-16 · CVE-2021-47795

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GeoVision GeoWebServer version 5.3.3

Description GeoVision GeoWebServer 5.3.3 has multiple security issues, including local file inclusion, cross-site scripting, and remote code execution. These issues are due to improper input sanitization. An attacker can exploit the WebStrings.srf API endpoint by manipulating path traversal and injection parameters. This allows access to system files and execution of malicious scripts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-47795

Affected Products

Geowebserver

References · 5

• 🔥 https://exploit-db.com/exploits/50211 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47795 · Security Note
• https://geovision.com.tw/cyber_security.php · Note
• https://twitter.com/CVEnew/status/2012126495062302955 · Twitter Post
• https://vulncheck.com/advisories/geovision-geowebserver-local-file-inclusion · Note