critical9.8Known exploited
CVE-2024-11120
GeoVision Devices OS Command Injection Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2025-05-07. Federal due date: 2025-05-28.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Geovision | Gv-Vs12 Firmware | All versions |
| Geovision | Gv-Vs11 Firmware | All versions |
| Geovision | Gv-Dsp Lpr Firmware | All versions |
| Geovision | Gvlx 4 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- https://www.twcert.org.tw/en/cp-139-8237-26d7a-2.html
- https://www.twcert.org.tw/tw/cp-132-8236-d4836-1.html
- https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-11120