Critical severity · published Jun 17, 2024
CVE-2024-6047
GeoVision EOL device - OS Command Injection
In wildKEV
9.8
CVSS
10.1%
EPSS
Yes
On KEV
Description
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)10.1% · higher than 96% of CVEs
Exploited in the wildYes
CISA KEVListed May 7, 2025
Federal remediation dueMay 28, 2025
Ransomware campaign useNot known
Affected products
Which versions
GV
GV VS04A · GeoVision
All versions, or not specified · source: vendor
GV
GV VS04H · GeoVision
All versions, or not specified · source: vendor
GV
GV-VS14_VS14 · GeoVision
All versions, or not specified · source: vendor
G4
GVLX 4 V2 · GeoVision
All versions, or not specified · source: vendor
G4
GVLX 4 V3 · GeoVision
All versions, or not specified · source: vendor
GV
GV_DSP_LPR_V2 · GeoVision
All versions, or not specified · source: vendor
GV
GV_GM8186_VS14 · GeoVision
All versions, or not specified · source: vendor
GV
GV_IPCAMD_GV_BX130 · GeoVision
All versions, or not specified · source: vendor
GV
GV_IPCAMD_GV_BX1500 · GeoVision
All versions, or not specified · source: vendor
GV
GV_IPCAMD_GV_CB220 · GeoVision
All versions, or not specified · source: vendor
GV
GV_IPCAMD_GV_EBL1100 · GeoVision
All versions, or not specified · source: vendor
GV
GV_IPCAMD_GV_EFD1100 · GeoVision
All versions, or not specified · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-6047
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-6047
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
third-party-advisory
https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html