VULNERABILITY INTELLIGENCE

CVE-2024-11120

CVSS score9.8 CRITICAL
EPSS probability28.39%
CISA KEVKnown exploited vulnerability
Published2024-11-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

GeoVision Devices OS Command Injection Vulnerability

Vendor / product: GeoVision / Multiple Devices

Description

Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports.

Weakness classification

  • twcert@cert.org.tw: CWE-78

Primary references