← CVE Radar
CVE-2024-11120GeoVision EOL devices - OS Command Injection
Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports.
9.8 CRITICALEPSS 28.38%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1twcert (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
CISA required action
⚡ Known exploited · remediation due May 28, 2025
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2024-11120
- Status
- Analyzed
- Assigner (CNA)
- twcert
- Published
- Nov 15, 2024
- Last modified
- 2026-06-17 06:57 UTC
- Weaknesses
- CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected Products
As published by the CNA in the CVE record.
GeoVisionGV-VS120 version ranges
No version detail published.
GeoVisionGV-VS110 version ranges
No version detail published.
GeoVisionGV-DSP_LPR_V30 version ranges
No version detail published.
GeoVisionGVLX 4 V20 version ranges
No version detail published.
GeoVisionGVLX 4 V30 version ranges
No version detail published.
References
- twcert.org.tw https://www.twcert.org.tw/en/cp-139-8237-26d7a-2.html
- twcert.org.tw https://www.twcert.org.tw/tw/cp-132-8236-d4836-1.html
- akamai.com https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-11120