CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2024-60479.8/CRITICALEPSS 10.1%CISA KEV
2024-06-17

GeoVision End-of-Life (EOL) IP Cameras and Video Servers OS Command Injection Vulnerability (CVE-2024-6047) Technical Advisory

[Affected Scope] End-of-Life (EOL) GeoVision devices including GV-VS12, GV-VS11, and GV-DSP LPR V3

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges, potentially leading to full device takeover and integration into IoT botnets like Mirai

[Mitigation] Since these devices are EOL and no official patches are available, immediately isolate the affected devices from the internet or replace them with supported models

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse