rewindex

RewindexCVEs

CVE-2024-6047: GeoVision EOL device - OS Command Injection

Critical · CVSS 9.8 (CVSS 3.1)KEV known exploitedEPSS 10.1%, 96th percentilePublished Updated Assigner: twcert

In CISA’s Known Exploited Vulnerabilities catalog: GeoVision Devices OS Command Injection Vulnerability.

Added , federal remediation due . Known ransomware use: Unknown.

Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · CWE-78

Status incidents that name it

No tracked status incident names this CVE.

Affected vendors and products

geovision: gv-bx1500geovision: gv-cb220geovision: gv-dsp_lpr_v2geovision: gv-ebl1100geovision: gv-efd1100geovision: gv-fd2410geovision: gv-fd3400geovision: gv-fd3401geovision: gv-fe420geovision: gv-lx_4_v2geovision: gv-lx_4_v3geovision: gv-vs03geovision: gv-vs04ageovision: gv-vs04hgeovision: gv-vs14geovision: gv-vs216xxgeovision: gv-vs2410geovision: gv-vs28xxGeoVision: GV_DSP_LPR_V2GeoVision: GV_GM8186_VS14GeoVision: GV_IPCAMD_GV_BX130GeoVision: GV_IPCAMD_GV_BX1500GeoVision: GV_IPCAMD_GV_CB220GeoVision: GV_IPCAMD_GV_EBL1100GeoVision: GV_IPCAMD_GV_EFD1100GeoVision: GV_IPCAMD_GV_FD2410GeoVision: GV_IPCAMD_GV_FD3400GeoVision: GV_IPCAMD_GV_FE3401GeoVision: GV_IPCAMD_GV_FE420GeoVision: GVLX 4 V2GeoVision: GVLX 4 V3GeoVision: GV_VS03GeoVision: GV VS04AGeoVision: GV VS04HGeoVision: GV-VS14_VS14GeoVision: GV_VS216XXGeoVision: GV_VS2410GeoVision: GV_VS28XX

References

All CVEsMarkdownJSON