Our takeCCCS relays GeoVision advisory AV26-998: GV-Eye for Android prior to V3.6.0 has vulnerabilities. Update to 3.6.0 or later if you run it.Cyber Resilience desk
What this means for you — Security leader:Review the GeoVision advisory for GV-Eye Android versions prior to V3.6.0 and update immediately if you manage mobile devices accessing control systems or video feeds.
What this means for you — Lean IT orgs:If you use the GeoVision GV-Eye Android app for cameras or access control, update it to version 3.6.0 or newer right away.
What this means for you — MSP:Check client inventories for any use of GeoVision GV-Eye Android app (pre-3.6.0); push the update and confirm deployment across affected mobile fleets.
What this means for you — Researcher:GeoVision released updates addressing vulnerabilities in GV-Eye for Android prior to V3.6.0; see the CCCS advisory for details.