CVE-2024-6047 GeoVision Devices OS Command Injection
Unauthenticated attackers can execute arbitrary system commands on GeoVision devices due to improper input filtering.
- Exploited in the wild
- Since 7 May 2025
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-6047?
CVE-2024-6047 is a critical command injection vulnerability in GeoVision GV VS04A, published on 17 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.
Weakness: CWE-78
Which versions are affected by CVE-2024-6047?
It affects 20 products.
Products include Geovision Gv-Bx130 Firmware, Geovision Gv-Bx1500 Firmware, Geovision Gv-Cb220 Firmware, Geovision Gv-Dsp Lpr Firmware, Geovision Gv-Ebl1100 Firmware, Geovision Gv-Efd1100 Firmware and 14 more.
How do I fix CVE-2024-6047?
No fix has been published for CVE-2024-6047 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 28 May 2025.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2024-6047 being exploited?
Yes. Attackers have exploited CVE-2024-6047 in the wild since at least 7 May 2025.
Sources
Also known as GHSA-w8wf-rhcx-wvhg.