Log in Start free

Actively exploited · Published Jun 17, 2024 · Assigned by twcert

CVE-2024-6047GeoVision EOL device - OS Command Injection

Critical 9.8 Exploited

In plain English

A critical-severity OS command injection in GV_DSP_LPR_V2 from GeoVision. Attackers are actively exploiting it in the wild (listed by CISA on May 7, 2025). The chance it is exploited in the next 30 days is estimated at 10.1% (higher than 96% of all known vulnerabilities). Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)10.1%top 4.3% of all CVEs
Exploited in the wildYesCISA KEV since May 7, 2025
Attack toolingNoneno public tooling known

CISA guidance

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Federal agencies must remediate by May 28, 2025.

Official description

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

Affected products (as reported)

VendorProductVersions
GeoVision GV_DSP_LPR_V2 all
GeoVision GV_IPCAMD_GV_BX1500 all
GeoVision GV_IPCAMD_GV_CB220 all
GeoVision GV_IPCAMD_GV_EBL1100 all
GeoVision GV_IPCAMD_GV_EFD1100 all
GeoVision GV_IPCAMD_GV_FD2410 all
GeoVision GV_IPCAMD_GV_FD3400 all
GeoVision GV_IPCAMD_GV_FE3401 all
GeoVision GV_IPCAMD_GV_FE420 all
GeoVision GV-VS14_VS14 all
GeoVision GV_VS03 all
GeoVision GV_VS2410 all
GeoVision GV_VS28XX all
GeoVision GV_VS216XX all
GeoVision GV VS04A all
GeoVision GV VS04H all
GeoVision GVLX 4 V2 all
GeoVision GVLX 4 V3 all
GeoVision GV_IPCAMD_GV_BX130 all
GeoVision GV_GM8186_VS14 all

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References