01 Record

CVE-2024-6047

GeoVision EOL device - OS Command Injection

CriticalKEVPUBLISHEDCNA: twcert

CNA base score9.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

GeoVision EOL device - OS Command Injection

03 Exploitation and scoring

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalog on 2025-05-07. Federal remediation due 2025-05-28.

SSVC decision

ExploitationactiveCISA reports credible evidence of active exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

10.07% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 95.2% of scored records. A rank, not a probability.

NVD base score

9.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-06-17 05:48Z2 YR AGO

Last updated

2025-10-21 22:56Z1 YR AGO

Reserved

2024-06-17

Assigning CNA

twcert

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Base

Data version

5.1

Document digest

e6e2064c2e57fbc2cdd9fbf8cbbebd74257375c881813e63e9527f2dbcd7cc13

05 Affected products

VendorProductVersionsPlatforms

GeoVisionGV_DSP_LPR_V2all—

GeoVisionGV_IPCAMD_GV_BX1500all—

GeoVisionGV_IPCAMD_GV_CB220all—

GeoVisionGV_IPCAMD_GV_EBL1100all—

GeoVisionGV_IPCAMD_GV_EFD1100all—

GeoVisionGV_IPCAMD_GV_FD2410all—

GeoVisionGV_IPCAMD_GV_FD3400all—

GeoVisionGV_IPCAMD_GV_FE3401all—

GeoVisionGV_IPCAMD_GV_FE420all—

GeoVisionGV-VS14_VS14all—

GeoVisionGV_VS03all—

GeoVisionGV_VS2410all—

GeoVisionGV_VS28XXall—

GeoVisionGV_VS216XXall—

GeoVisionGV VS04Aall—

GeoVisionGV VS04Hall—

GeoVisionGVLX 4 V2all—

GeoVisionGVLX 4 V3all—

GeoVisionGV_IPCAMD_GV_BX130all—

GeoVisionGV_GM8186_VS14all—

geovisiongv-dsp_lpr_v20 to < *—

geovisiongv-bx15000 to < *—

geovisiongv-cb2200 to < *—

geovisiongv-ebl11000 to < *—

geovisiongv-efd11000 to < *—

geovisiongv-fd24100 to < *—

geovisiongv-fd34000 to < *—

geovisiongv-fd34010 to < *—

geovisiongv-fe4200 to < *—

geovisiongv-vs140 to < *—

geovisiongv-vs030 to < *—

geovisiongv-vs24100 to < *—

geovisiongv-vs04a0 to < *—

geovisiongv-vs04h0 to < *—

geovisiongv-lx_4_v20 to < *—

geovisiongv-lx_4_v30 to < *—

geovisiongv-vs28xx0 to < *—

geovisiongv-vs216xx0 to < *—

06 References

www.twcert.org.twhttps://www.twcert.org.tw/tw/cp-132-7883-f5635-1.htmlthird-party-advisory
www.twcert.org.twhttps://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.htmlthird-party-advisory
www.akamai.comhttps://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet
www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6047government-resource

07 Remediation

All affected products are no longer in surport. Please retire or replace them.