May 7, 2025

Started

• Closed✓Patched

  GeoVision Multiple Devices: 2 exploited vulnerabilities (CVE-2024-11120, CVE-2024-6047)

  CVE-2024-11120: Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. CVE-2024-6047: Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. Added to CISA KEV on 2025-05-07.

  GeoVision Multiple Devices·Closed May 7, 2025·updated May 7, 2025