Cyber Security

GeoVision's Cyber Security Policy


Security First at GeoVision

It is the duty and responsibility of GeoVision to notify all users in cases when security concerns have been raised. GeoVision follows detailed practices to ensure the highest standards of network security are met. Whenever plausible security vulnerabilities are discovered, immediate actions are taken by devising necessary upgrades and informing users of the issues.

GeoVision is the first Taiwan tech company to be certified by TAICS (Taiwan Association of Information and Communication Standards), on 2018/11/19, to pass its Level 2 of video surveillance system security standards. As of date, it is the highest level of security any Taiwan tech company has achieved.

The latest security patches and updates are included in the latest software/firmware releases and are available at GeoVision product download page at provided the product is still supported by GeoVision.

Contact Information

We encourage users to report any newly discovered vulnerability in our products by contacting our security team at

Note: GeoVision security team will not process requests for support, feature modification requests. Such requests are processed by either our sales department or technical support.

GeoVision Vulnerability Policy

Vulnerability Management Flow

For any newly reported vulnerability in any GeoVision product, a specific team is dispatched to work with research & development and testing departments and ensure the solution is provided without generating any further risk to users.

The main general flow is designed in 4 stages:
  • Discover
  • Analyze
  • Prioritize
  • Solution update & follow up

Vulnerability Classification

A vulnerability when confirmed is classified as non-critical or critical.

The class of critical would suggest high level of risk for users and GeoVision will provide an unscheduled update to fix the vulnerability and documentation to assist users on applying the update.

The Non-critical class vulnerability when not posing any risk to the recommended usage of the product is going to be solved in the normally scheduled firmware release.

Processing and Reaction Time

Any valid report sent to will be responded within 48 hours and with the possibility of additional questions required for investigation.


TAICS (Taiwan Association of Information and Communication Standards)

Security Advisory

Advisory ID Advisory Date Published Article
GVC-2021-10-22 Notice of Security Incident October 22, 2021 Notice of Security Incident
IPC-2021-09-15-03 IP Camera Vulnerabilities September 28, 2021 Security Advisory
IPC-2021-07-27-01 IP Camera Vulnerabilities September 27, 2021 Security Advisory
ASM-2021-06-15-01 Multiple XSS Vulnerabilities July 21 2021 Security Advisory