VULNERABILITY INTELLIGENCE

CVE-2024-6047

CVSS score9.8 CRITICAL
EPSS probability10.07%
CISA KEVKnown exploited vulnerability
Published2024-06-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

GeoVision Devices OS Command Injection Vulnerability

Vendor / product: GeoVision / Multiple Devices

Description

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

Weakness classification

  • twcert@cert.org.tw: CWE-78

Primary references