CVE-2024-6047

GeoVision Devices OS Command Injection Vulnerability

Gv-Dsp Lpr Firmware

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

17. Jun 2024

Ausgewertete Quellen

• Hinweis
  https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet
• Hinweis
  https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html
• Hinweis
  https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6047
• CISA
  GeoVision Devices OS Command Injection Vulnerability
• NVD
  CVE-2024-6047