{"id":"CVE-2024-6047","url":"https://www.cyber-defence.io/tools/cve/CVE-2024-6047","generatedAt":"2026-10-31T09:13:14.141Z","title":"GeoVision Devices OS Command Injection Vulnerability","description":"Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.","published":"2024-06-17T06:15:09.000Z","lastModified":"2026-06-17T08:17:10.000Z","status":"Analyzed","sourceIdentifier":"twcert@cert.org.tw","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-78"],"affected":["geovision/gv-dsp lpr firmware","geovision/gv-bx130 firmware","geovision/gv-bx1500 firmware","geovision/gv-cb220 firmware","geovision/gv-ebl1100 firmware","geovision/gv-efd1100 firmware","geovision/gv-fd2410 firmware","geovision/gv-fd3400 firmware","geovision/gv-fe3401 firmware","geovision/gv-fe420 firmware","geovision/gv-gm8186 vs14 firmware","geovision/gv-vs14 firmware","geovision/gv-vs03 firmware","geovision/gv-vs2410 firmware","geovision/gv-vs21600 firmware","geovision/gv-vs04a firmware","geovision/gv-vs04h firmware","geovision/gvlx 4 firmware","geovision/gv-vs2800 firmware","geovision/gv-vs2820 firmware"],"epss":{"score":0.10072,"percentile":0.95624,"date":"2026-10-30","history":[]},"kev":{"listed":true,"dateAdded":"2025-05-07","dueDate":"2025-05-28","knownRansomwareCampaignUse":"Unknown","notes":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.\nhttps://dlcdn.geovision.com.tw/TechNotice/CyberSecurity/Security_Advisory_IP_Device_2024-11.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2024-6047"},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 28 May 2025). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[],"references":[{"url":"https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html","tags":["Third Party Advisory"],"source":"twcert@cert.org.tw"},{"url":"https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html","tags":["Third Party Advisory"],"source":"twcert@cert.org.tw"},{"url":"https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet","tags":["Exploit","Third Party Advisory"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6047","tags":["US Government Resource"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-6047","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}