BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2024-6047GeoVision EOL device - OS Command Injection

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

9.8 CRITICALEPSS 10.07%⚡ Known Exploited (CISA KEV)NVD: Analyzed

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
9.8CRITICAL3.1twcert (CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA required action

⚡ Known exploited · remediation due May 28, 2025

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Details

CVE ID
CVE-2024-6047
Status
Analyzed
Assigner (CNA)
twcert
Published
Jun 17, 2024
Last modified
2026-06-17 08:17 UTC
Weaknesses
  • CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-07 15:44 UTC.