CVE Feed

    Dashboard / CVE / CVE-2024-6047

    CVE-2024-6047

    Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

    Published:Jun 17, 2024
    Last Modified:Oct 30, 2025
    EPS:Jun 17, 2024
    EPSS Score:0.7488
    CVSS Score:9.8

    CISA Notification

    Description

    Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

    Required Action:

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Notes:

    No extra notes provided.

    Due Date
    May 28, 2025
    471 days ago
    Alert Date
    May 7, 2025
    492 days ago

    Affected Products

    Vendor
    Geovision
    Product
    Gv-bx130
    Vendor
    Geovision
    Product
    Gv-bx130 Firmware
    Vendor
    Geovision
    Product
    Gv-bx1500
    Vendor
    Geovision
    Product
    Gv-bx1500 Firmware
    Vendor
    Geovision
    Product
    Gv-cb220
    Vendor
    Geovision
    Product
    Gv-cb220 Firmware
    Vendor
    Geovision
    Product
    Gv-dsp Lpr
    Vendor
    Geovision
    Product
    Gv-dsp Lpr Firmware
    Vendor
    Geovision
    Product
    Gv-dsp Lpr V2
    Vendor
    Geovision
    Product
    Gv-ebl1100
    Vendor
    Geovision
    Product
    Gv-ebl1100 Firmware
    Vendor
    Geovision
    Product
    Gv-efd1100
    Vendor
    Geovision
    Product
    Gv-efd1100 Firmware
    Vendor
    Geovision
    Product
    Gv-fd2410
    Vendor
    Geovision
    Product
    Gv-fd2410 Firmware
    Vendor
    Geovision
    Product
    Gv-fd3400
    Vendor
    Geovision
    Product
    Gv-fd3400 Firmware
    Vendor
    Geovision
    Product
    Gv-fd3401
    Vendor
    Geovision
    Product
    Gv-fe3401
    Vendor
    Geovision
    Product
    Gv-fe3401 Firmware
    Vendor
    Geovision
    Product
    Gv-fe420
    Vendor
    Geovision
    Product
    Gv-fe420 Firmware
    Vendor
    Geovision
    Product
    Gv-gm8186 Vs14
    Vendor
    Geovision
    Product
    Gv-gm8186 Vs14 Firmware
    Vendor
    Geovision
    Product
    Gv-lx 4 V2
    Vendor
    Geovision
    Product
    Gv-lx 4 V3
    Vendor
    Geovision
    Product
    Gv-vs03
    Vendor
    Geovision
    Product
    Gv-vs03 Firmware
    Vendor
    Geovision
    Product
    Gv-vs04a
    Vendor
    Geovision
    Product
    Gv-vs04a Firmware
    Vendor
    Geovision
    Product
    Gv-vs04h
    Vendor
    Geovision
    Product
    Gv-vs04h Firmware
    Vendor
    Geovision
    Product
    Gv-vs14
    Vendor
    Geovision
    Product
    Gv-vs14 Firmware
    Vendor
    Geovision
    Product
    Gv-vs21600
    Vendor
    Geovision
    Product
    Gv-vs21600 Firmware
    Vendor
    Geovision
    Product
    Gv-vs216xx
    Vendor
    Geovision
    Product
    Gv-vs2410
    Vendor
    Geovision
    Product
    Gv-vs2410 Firmware
    Vendor
    Geovision
    Product
    Gv-vs2800
    Vendor
    Geovision
    Product
    Gv-vs2800 Firmware
    Vendor
    Geovision
    Product
    Gv-vs2820
    Vendor
    Geovision
    Product
    Gv-vs2820 Firmware
    Vendor
    Geovision
    Product
    Gv-vs28xx
    Vendor
    Geovision
    Product
    Gvlx 4
    Vendor
    Geovision
    Product
    Gvlx 4 Firmware

    Exploits

    https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High