← Back to browse · API

CVE-2024-6047

Severity
CRITICAL
CVSS
9.8
EPSS
0.10072
Risk score
67.73
CISA KEV
Yes
PoC
No
Published
2024-06-17
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2024-47205, GHSA-W8WF-RHCX-WVHG
Products
GeoVision:GV VS04A all, GeoVision:GV VS04H all, GeoVision:GV-VS14_VS14 all, GeoVision:GVLX 4 V2 all, GeoVision:GVLX 4 V3 all, GeoVision:GV_DSP_LPR_V2 all, GeoVision:GV_GM8186_VS14 all, GeoVision:GV_IPCAMD_GV_BX130 all, GeoVision:GV_IPCAMD_GV_BX1500 all, GeoVision:GV_IPCAMD_GV_CB220 all, GeoVision:GV_IPCAMD_GV_EBL1100 all, GeoVision:GV_IPCAMD_GV_EFD1100 all, GeoVision:GV_IPCAMD_GV_FD2410 all, GeoVision:GV_IPCAMD_GV_FD3400 all, GeoVision:GV_IPCAMD_GV_FE3401 all, GeoVision:GV_IPCAMD_GV_FE420 all, GeoVision:GV_VS03 all, GeoVision:GV_VS216XX all, GeoVision:GV_VS2410 all, GeoVision:GV_VS28XX all, GeoVision:Multiple Devices
Sources
cisa.gov CVE-2024-6047
euvd EUVD-2024-47205

Description

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

References