CVE-2024-6047

Description

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html ↗
• https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html ↗
• https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet ↗
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6047 ↗