Back to CVE records
Critical 9.8Known exploited (CISA KEV)Published Jun 17, 2024
CVE-2024-6047GeoVision EOL device - OS Command Injection
Updated under an hour ago ()
Does this affect you?
It affects GeoVision GV_DSP_LPR_V2 and 57 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since May 7, 2025; federal agencies had to remediate by May 28, 2025. Treat that date as your deadline.
Do this next
Start free and add your stack
Free account, 1 product
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.
- CVSS
- 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-78
- Known exploited
- Added to CISA KEV May 7, 2025; federal remediation due May 28, 2025Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- EPSS (exploitation in the next 30 days)
- 10.07% (percentile 96)
- Assigned by
- twcert
- NVD analysis
- Analyzed
- Record last updated
- Oct 21, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
GeoVision GV_DSP_LPR_V2 geovision:gv_dsp_lpr_v2 (from the name) | all versions | CNA record |
GeoVision GV_IPCAMD_GV_BX1500 geovision:gv_ipcamd_gv_bx1500 (from the name) | all versions | CNA record |
GeoVision GV_IPCAMD_GV_CB220 geovision:gv_ipcamd_gv_cb220 (from the name) | all versions | CNA record |
GeoVision GV_IPCAMD_GV_EBL1100 geovision:gv_ipcamd_gv_ebl1100 (from the name) | all versions | CNA record |
GeoVision GV_IPCAMD_GV_EFD1100 geovision:gv_ipcamd_gv_efd1100 (from the name) | all versions | CNA record |
GeoVision GV_IPCAMD_GV_FD2410 geovision:gv_ipcamd_gv_fd2410 (from the name) | all versions | CNA record |
GeoVision GV_IPCAMD_GV_FD3400 geovision:gv_ipcamd_gv_fd3400 (from the name) | all versions | CNA record |
GeoVision GV_IPCAMD_GV_FE3401 geovision:gv_ipcamd_gv_fe3401 (from the name) | all versions | CNA record |
GeoVision GV_IPCAMD_GV_FE420 geovision:gv_ipcamd_gv_fe420 (from the name) | all versions | CNA record |
GeoVision GV-VS14_VS14 geovision:gv_vs14_vs14 (from the name) | all versions | CNA record |
GeoVision GV_VS03 geovision:gv_vs03 (from the name) | all versions | CNA record |
GeoVision GV_VS2410 geovision:gv_vs2410 (from the name) | all versions | CNA record |
GeoVision GV_VS28XX geovision:gv_vs28xx (from the name) | all versions | CNA record |
GeoVision GV_VS216XX geovision:gv_vs216xx (from the name) | all versions | CNA record |
GeoVision GV VS04A geovision:gv_vs04a (from the name) | all versions | CNA record |
GeoVision GV VS04H geovision:gv_vs04h (from the name) | all versions | CNA record |
GeoVision GVLX 4 V2 geovision:gvlx_4_v2 (from the name) | all versions | CNA record |
GeoVision GVLX 4 V3 geovision:gvlx_4_v3 (from the name) | all versions | CNA record |
GeoVision GV_IPCAMD_GV_BX130 geovision:gv_ipcamd_gv_bx130 (from the name) | all versions | CNA record |
GeoVision GV_GM8186_VS14 geovision:gv_gm8186_vs14 (from the name) | all versions | CNA record |
geovision gv-dsp_lpr_v2 geovision:gv-dsp_lpr_v2 | all versions | CISA ADP |
geovision gv-bx1500 geovision:gv-bx1500 | all versions | CISA ADP |
geovision gv-cb220 geovision:gv-cb220 | all versions | CISA ADP |
geovision gv-ebl1100 geovision:gv-ebl1100 | all versions | CISA ADP |
geovision gv-efd1100 geovision:gv-efd1100 | all versions | CISA ADP |
geovision gv-fd2410 geovision:gv-fd2410 | all versions | CISA ADP |
geovision gv-fd3400 geovision:gv-fd3400 | all versions | CISA ADP |
geovision gv-fd3401 geovision:gv-fd3401 | all versions | CISA ADP |
geovision gv-fe420 geovision:gv-fe420 | all versions | CISA ADP |
geovision gv-vs14 geovision:gv-vs14 | all versions | CISA ADP |
geovision gv-vs03 geovision:gv-vs03 | all versions | CISA ADP |
geovision gv-vs2410 geovision:gv-vs2410 | all versions | CISA ADP |
geovision gv-vs04a geovision:gv-vs04a | all versions | CISA ADP |
geovision gv-vs04h geovision:gv-vs04h | all versions | CISA ADP |
geovision gv-lx_4_v2 geovision:gv-lx_4_v2 | all versions | CISA ADP |
geovision gv-lx_4_v3 geovision:gv-lx_4_v3 | all versions | CISA ADP |
geovision gv-vs28xx geovision:gv-vs28xx | all versions | CISA ADP |
geovision gv-vs216xx geovision:gv-vs216xx | all versions | CISA ADP |
geovision gv-dsp_lpr_firmware geovision:gv-dsp_lpr_firmware | all versions | NVD |
geovision gv-bx130_firmware geovision:gv-bx130_firmware | all versions | NVD |
geovision gv-bx1500_firmware geovision:gv-bx1500_firmware | all versions | NVD |
geovision gv-cb220_firmware geovision:gv-cb220_firmware | all versions | NVD |
geovision gv-ebl1100_firmware geovision:gv-ebl1100_firmware | all versions | NVD |
geovision gv-efd1100_firmware geovision:gv-efd1100_firmware | all versions | NVD |
geovision gv-fd2410_firmware geovision:gv-fd2410_firmware | all versions | NVD |
geovision gv-fd3400_firmware geovision:gv-fd3400_firmware | all versions | NVD |
geovision gv-fe3401_firmware geovision:gv-fe3401_firmware | all versions | NVD |
geovision gv-fe420_firmware geovision:gv-fe420_firmware | all versions | NVD |
geovision gv-gm8186_vs14_firmware geovision:gv-gm8186_vs14_firmware | all versions | NVD |
geovision gv-vs14_firmware geovision:gv-vs14_firmware | all versions | NVD |
geovision gv-vs03_firmware geovision:gv-vs03_firmware | all versions | NVD |
geovision gv-vs2410_firmware geovision:gv-vs2410_firmware | all versions | NVD |
geovision gv-vs21600_firmware geovision:gv-vs21600_firmware | all versions | NVD |
geovision gv-vs04a_firmware geovision:gv-vs04a_firmware | all versions | NVD |
geovision gv-vs04h_firmware geovision:gv-vs04h_firmware | all versions | NVD |
geovision gvlx_4_firmware geovision:gvlx_4_firmware | all versions | NVD |
geovision gv-vs2800_firmware geovision:gv-vs2800_firmware | all versions | NVD |
geovision gv-vs2820_firmware geovision:gv-vs2820_firmware | all versions | NVD |
References
- https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.htmlthird-party-advisory
- https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.htmlthird-party-advisory
- https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnetexploit, third-party-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6047us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.