CVE-2024-11120

GeoVision EOL devices - OS Command Injection

Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports.

Affected

GeoVision · GV-VS12 · GV-VS11 · GV-DSP_LPR_V3 · GVLX 4 V2 · GVLX 4 V3

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

28.39% chance of exploitation in the next 30 days, 98th percentile

CISA KEV

added 2025-05-07

Published

2024-11-15

Updated

2025-10-21

Proof-of-concept exploits (1)

• https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-bot…

Security advisories

• https://www.twcert.org.tw/en/cp-139-8237-26d7a-2.html
• https://www.twcert.org.tw/tw/cp-132-8236-d4836-1.html

References

• CVE Record
• NVD entry