CVE-2024-11120
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| GeoVision | GV-VS12 | 0 | affected |
| GeoVision | GV-VS11 | 0 | affected |
| GeoVision | GV-DSP_LPR_V3 | 0 | affected |
| GeoVision | GVLX 4 V2 | 0 | affected |
| GeoVision | GVLX 4 V3 | 0 | affected |
Weaknesses
- CWE-78: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: active
- Automatable: yes
- Technical Impact: total
Additional References
- https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-11120
References
- https://www.twcert.org.tw/tw/cp-132-8236-d4836-1.html
- https://www.twcert.org.tw/en/cp-139-8237-26d7a-2.html
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.