CVE-2024-6047

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 9.8EPSS 10%

Published 2024-06-17Updated 2025-05-07

Exploited in the wildMedia 5239

Vulnerability details

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNAtwcert

EPSS score history

Sources

8 links

PoC links are not available for guest users. Login to view them.

CISA Known Exploited CVEShield The Hacker News SC Magazine The Register SC Magazine CVE Organization NVD Analysis

Profile

CVSS

9.8

EPSS

10%

Published

2024-06-17

Updated

2025-05-07

CNA

twcert

Vendors

GeoVision

20 products

CPEs

cpe:2.3:h:geovision:gv-dsp_lpr_v2:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-bx1500:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-cb220:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-ebl1100:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-efd1100:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-fd2410:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-fd3400:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-fd3401:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-fe420:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-vs14:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-vs03:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-vs2410:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-vs04a:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-vs04h:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-lx_4_v2:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-lx_4_v3:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-vs28xx:0:*:*:*:*:*:*:*

cpe:2.3:h:geovision:gv-vs216xx:0:*:*:*:*:*:*:*

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated