What’s Vulnerable › Vulnerabilities

CVE-2024-6047: GeoVision Devices OS Command Injection Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2025-05-07
• EPSS: 10.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-06-17 · updated 2026-06-17
• Weakness: CWE-78

Description

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

Affected products

• GeoVision Gv-Bx130 Firmware: all versions
• GeoVision Gv-Bx1500 Firmware: all versions
• GeoVision Gv-Cb220 Firmware: all versions
• GeoVision Gv-Dsp Lpr Firmware: all versions
• GeoVision Gv-Ebl1100 Firmware: all versions
• GeoVision Gv-Efd1100 Firmware: all versions
• GeoVision Gv-Fd2410 Firmware: all versions
• GeoVision Gv-Fd3400 Firmware: all versions
• GeoVision Gv-Fe3401 Firmware: all versions
• GeoVision Gv-Fe420 Firmware: all versions
• GeoVision Gv-Gm8186 Vs14 Firmware: all versions
• GeoVision Gv-Vs03 Firmware: all versions
• GeoVision Gv-Vs04A Firmware: all versions
• GeoVision Gv-Vs04H Firmware: all versions
• GeoVision Gv-Vs14 Firmware: all versions
• GeoVision Gv-Vs21600 Firmware: all versions
• GeoVision Gv-Vs2410 Firmware: all versions
• GeoVision Gv-Vs2800 Firmware: all versions
• GeoVision Gv-Vs2820 Firmware: all versions
• GeoVision Gvlx 4 Firmware: all versions

References

• https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html
• https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html
• https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html
• https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html
• https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6047

Get alerted when CVE-2024-6047 or the next vulnerability affects your stack