critical9.8Known exploited
CVE-2024-6047
GeoVision Devices OS Command Injection Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2025-05-07. Federal due date: 2025-05-28.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Geovision | Gv-Dsp Lpr Firmware | All versions |
| Geovision | Gv-Bx130 Firmware | All versions |
| Geovision | Gv-Bx1500 Firmware | All versions |
| Geovision | Gv-Cb220 Firmware | All versions |
| Geovision | Gv-Ebl1100 Firmware | All versions |
| Geovision | Gv-Efd1100 Firmware | All versions |
| Geovision | Gv-Fd2410 Firmware | All versions |
| Geovision | Gv-Fd3400 Firmware | All versions |
| Geovision | Gv-Fe3401 Firmware | All versions |
| Geovision | Gv-Fe420 Firmware | All versions |
| Geovision | Gv-Gm8186 Vs14 Firmware | All versions |
| Geovision | Gv-Vs14 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html
- https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html
- https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html
- https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html
- https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6047