CVEvulnerability
CVE-2024-6047
CISA Known Exploited Vulnerability
GeoVision Devices OS Command Injection Vulnerability — GeoVision Multiple Devices
Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
- Added to KEV
- 2025-05-07
- Remediation due
- 2025-05-28
- Ransomware use
- Unknown
- Required action
- Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Notes
- https://dlcdn.geovision.com.tw/TechNotice/CyberSecurity/Security_Advisory_IP_Device_2024-11.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2024-6047
- Status
- Analyzed
- Published
- 2024-06-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-78
Description
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.
Affected configurations
• geovision gv-dsp lpr firmware
• geovision gv-bx130 firmware
• geovision gv-bx1500 firmware
• geovision gv-cb220 firmware
• geovision gv-ebl1100 firmware
• geovision gv-efd1100 firmware
• geovision gv-fd2410 firmware
• geovision gv-fd3400 firmware
• geovision gv-fe3401 firmware
• geovision gv-fe420 firmware
• geovision gv-gm8186 vs14 firmware
• geovision gv-vs14 firmware
• geovision gv-vs03 firmware
• geovision gv-vs2410 firmware
• geovision gv-vs21600 firmware
• geovision gv-vs04a firmware
• geovision gv-vs04h firmware
• geovision gvlx 4 firmware
• geovision gv-vs2800 firmware
• geovision gv-vs2820 firmware
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html Third Party Advisory
- https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html Third Party Advisory
- https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html Third Party Advisory
- https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html Third Party Advisory
- https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet Exploit, Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6047 US Government Resource