Critical severity · published Nov 15, 2024
CVE-2024-11120
GeoVision EOL devices - OS Command Injection
In wildKEV
9.8
CVSS
28.4%
EPSS
Yes
On KEV
Description
Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)28.4% · higher than 98% of CVEs
Exploited in the wildYes
CISA KEVListed May 7, 2025
Federal remediation dueMay 28, 2025
Ransomware campaign useNot known
Affected products
Which versions
GV
GV-DSP_LPR_V3 · GeoVision
0 · source: vendor
GV
GV-VS11 · GeoVision
0 · source: vendor
GV
GV-VS12 · GeoVision
0 · source: vendor
G4
GVLX 4 V2 · GeoVision
0 · source: vendor
G4
GVLX 4 V3 · GeoVision
0 · source: vendor
GL
Gv-dsp Lpr Firmware · Geovision
All versions, or not specified · source: NVD
GF
Gv-vs11 Firmware · Geovision
0 · source: NVD, CISA
GF
Gv-vs12 Firmware · Geovision
0 · source: NVD, CISA
G4
Gvlx 4 Firmware · Geovision
All versions, or not specified · source: NVD
GL
Gv-dsp Lpr V3 Firmware · Geovision
0 · source: CISA
G4
Gvlx 4 V2 Firmware · Geovision
0 · source: CISA
G4
Gvlx 4 V3 Firmware · Geovision
0 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-11120
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-11120
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
third-party-advisory
https://www.twcert.org.tw/tw/cp-132-8236-d4836-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-8237-26d7a-2.html