CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-11-15
Critical OS Command Injection Vulnerability in End-of-Life (EOL) GeoVision Devices (CVE-2024-11120) Active Exploitation Alert
[Affected Scope] Certain End-of-Life (EOL) GeoVision IP cameras, video servers, and LPR systems
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges, leading to complete device takeover and botnet recruitment
[Mitigation] Since these devices are EOL and no patches will be released, immediately isolate the affected devices from the internet or replace them with supported models