CVE-2024-6047 KEV
9.8
CRITICAL · CVSS 3.1 · EPSS 10.1% (pctl 95)
Patch first
On CISA KEV — known exploited in the wild, due 2025-05-28.
Description
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 10.07% — more likely to be exploited than 95% of all CVEs |
| Weakness | CWE-78 |
| On CISA KEV | yes — remediate by 2025-05-28 |
| Public exploit | none known |
| Published | 2024-06-17 |
| Last modified | 2026-06-17 |
CISA KEV
| Name | GeoVision Devices OS Command Injection Vulnerability |
|---|---|
| Added | 2025-05-07 |
| Due | 2025-05-28 |
| Vendor / product | GeoVision / Multiple Devices |
| Ransomware use | none reported |
Affected (40)
| Vendor | Product |
|---|---|
| geovision | gv-bx130 |
| geovision | gv-bx130 firmware |
| geovision | gv-bx1500 |
| geovision | gv-bx1500 firmware |
| geovision | gv-cb220 |
| geovision | gv-cb220 firmware |
| geovision | gv-dsp lpr |
| geovision | gv-dsp lpr firmware |
| geovision | gv-ebl1100 |
| geovision | gv-ebl1100 firmware |
| geovision | gv-efd1100 |
| geovision | gv-efd1100 firmware |
| geovision | gv-fd2410 |
| geovision | gv-fd2410 firmware |
| geovision | gv-fd3400 |
| geovision | gv-fd3400 firmware |
| geovision | gv-fe3401 |
| geovision | gv-fe3401 firmware |
| geovision | gv-fe420 |
| geovision | gv-fe420 firmware |
| geovision | gv-gm8186 vs14 |
| geovision | gv-gm8186 vs14 firmware |
| geovision | gv-vs03 |
| geovision | gv-vs03 firmware |
| geovision | gv-vs04a |
| geovision | gv-vs04a firmware |
| geovision | gv-vs04h |
| geovision | gv-vs04h firmware |
| geovision | gv-vs14 |
| geovision | gv-vs14 firmware |
| geovision | gv-vs21600 |
| geovision | gv-vs21600 firmware |
| geovision | gv-vs2410 |
| geovision | gv-vs2410 firmware |
| geovision | gv-vs2800 |
| geovision | gv-vs2800 firmware |
| geovision | gv-vs2820 |
| geovision | gv-vs2820 firmware |
| geovision | gvlx 4 |
| geovision | gvlx 4 firmware |
References
- https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html
- https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html
- https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html
- https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html
- https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6047
→ the Explorer · watch your stack · NVD