Actively exploited in the wild
GeoVision Devices OS Command Injection Vulnerability
GeoVision - Multiple Devices · Listed in the CISA KEV since 2025-05-07. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2024-11120
CriticalCVSS 9.8KEVSummary
Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this to inject and execute arbitrary system commands on the device. This vulnerability has already been exploited.
Risk Assessment
An attacker can take control of the device, potentially leading to system compromise and data access.
Recommendation
Immediately disconnect these devices from the network and replace them with newer models, as they will no longer receive patches.
Other vulnerabilities in GeoVision devices
Original NVD description (English source)
Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports.