CVE-2024-6047

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-06-17

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

Affected Platforms (CPE)

💻

Geovision

Gv Dsp Lpr Firmware

All versions

💻

Geovision

Gv Bx130 Firmware

All versions

💻

Geovision

Gv Bx1500 Firmware

All versions

💻

Geovision

Gv Cb220 Firmware

All versions

References & Advisories

🔗 https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html

🔗 https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html

🔗 https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html

🔗 https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html

🔗 https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6047

Vulnerability Description

Affected Platforms (CPE)

Gv Dsp Lpr Firmware

Gv Bx130 Firmware

Gv Bx1500 Firmware

Gv Cb220 Firmware

References & Advisories

相關漏洞威脅