456 matches found
CVE-2024-11120
CVE-2024-11120 is a pre-auth OS Command Injection affecting certain GeoVision EOL devices. Unauthenticated remote attackers can inject/execute commands, with active exploitation observed in the wild (Mirai-related activity via the /DateSetting.cgi endpoint and szSrvIpAddr parameter). Mitigations ...
CVE-2024-11120 GeoVision EOL devices - OS Command Injection
Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received relat...
CVE-2024-11120 GeoVision EOL devices - OS Command Injection
Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received relat...
CVE-2024-11120
Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received relat...
VulnCheck KEV: CVE-2024-11120
Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users should discontinue product utilization...
GeoVision EOL 操作系统命令注入漏洞
GeoVision EOL is a series of surveillance devices from the Chinese company GeoVision. GeoVision EOL suffers from an operating system command injection vulnerability that originates from an unauthenticated, remote attacker being able to inject and execute arbitrary system commands on the device...
PT-2024-8246
Name of the Vulnerable Software and Affected Versions GeoVision GV-VS12 versions GeoVision GV-VS11 versions GeoVision GV-DSP LPR V3 versions GeoVision GVLX 4 V2 versions GeoVision GVLX 4 V3 versions Description The issue is related to an OS Command Injection vulnerability in certain end-of-life E...
VulnCheck KEV: CVE-2024-6047
Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users should discontinue product utilization...
The vulnerability of the microprogrammed software in video surveillance systems GeoVision GV-DSP, GV-IPCAMD, GV-VS, and GVLX 4 exists due to the lack of measures taken to neutralize special elements used in the operating system commands. This vulnerability allows attackers to execute arbitrary commands.
The vulnerability of the microprogramming software used in video surveillance systems GeoVision GV-DSP, GV-IPCAMD, GV-VS, and GVLX 4 exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote...
CVE-2024-6047
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device...
CVE-2024-6047 GeoVision EOL device - OS Command Injection
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device...
CVE-2024-6047 GeoVision EOL device - OS Command Injection
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device...
CVE-2024-6047
CVE-2024-6047 affects GeoVision end-of-life devices. A failure to properly filter input enables OS command injection via unauthenticated remote access (e.g., through the /DateSetting.cgi endpoint), allowing arbitrary command execution with high impact (CVE severity rated up to 9.8 by TWCERT/CTW)....
PT-2024-5054
Name of the Vulnerable Software and Affected Versions GeoVision devices affected versions not specified Description The issue exists due to the failure to properly filter user input for specific functionality, allowing unauthenticated remote attackers to inject and execute arbitrary system comman...
GeoVision EOL Operating System Command Injection Vulnerability
GeoVision EOL is a series of surveillance devices from GeoVision Japan. The GeoVision EOL suffers from an operating system command injection vulnerability that stems from an inability to properly filter user input. A remote attacker could exploit this vulnerability to inject and execute arbitrary...
CVE-2024-6047
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value:...
GV-ASManager Security Vulnerability
Geovision GV-ASManager is Geovision's network access control solution for small businesses and multinational corporations with facilities worldwide. A security vulnerability exists in GV-ASManager version V6.0.1.0 that stems from a file inclusion vulnerability in GeoWebServer...
The vulnerability of the GeoVision GV-ADR2701 video surveillance system allows a intruder to bypass security measures.
The vulnerability of the GeoVision GV-ADR2701 video surveillance system is related to errors during the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass security measures...
