Actively exploited in the wild
GeoVision Devices OS Command Injection Vulnerability
GeoVision - Multiple Devices · Listed in the CISA KEV since 2025-05-07. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2024-6047
CriticalCVSS 9.8KEVSummary
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.
Risk Assessment
An unauthenticated attacker can remotely execute arbitrary system commands, taking control of the device.
Recommendation
Replace EOL GeoVision devices with newer models or apply compensating controls such as network isolation.
Other vulnerabilities in GeoVision devices
Original NVD description (English source)
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.