CVE-2024-6047
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.
- Published Jun 17, 2024
- CVSS 9.8 critical
- 10.1% chance of exploitation in the next 30 days (EPSS)
- In CISA's Known Exploited Vulnerabilities catalog
- Public exploit code is available
Affected software
- GeoVision GV-VS14_VS14
- GeoVision GV_DSP_LPR_V2
- GeoVision GV_IPCAMD_GV_BX1500
- GeoVision GV_IPCAMD_GV_CB220
- GeoVision GV_IPCAMD_GV_EBL1100
- GeoVision GV_IPCAMD_GV_EFD1100
- GeoVision GV_IPCAMD_GV_FD2410
- GeoVision GV_IPCAMD_GV_FD3400
- GeoVision GV_IPCAMD_GV_FE3401
- GeoVision GV_IPCAMD_GV_FE420
- GeoVision GV_VS03
- GeoVision GV_VS2410