{"history":[{"alert":0,"cve":"CVE-2024-6047","id":22791,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.10072, \"percentile\": 0.95696}"},{"alert":0,"cve":"CVE-2024-6047","id":20411,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.10072, \"percentile\": 0.95668}"},{"alert":0,"cve":"CVE-2024-6047","id":18380,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.10072, \"percentile\": 0.95664}"},{"alert":0,"cve":"CVE-2024-6047","id":16444,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.10072, \"percentile\": 0.95663}"},{"alert":0,"cve":"CVE-2024-6047","id":14422,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.10072, \"percentile\": 0.9566}"},{"alert":0,"cve":"CVE-2024-6047","id":12204,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.10072, \"percentile\": 0.95654}"},{"alert":0,"cve":"CVE-2024-6047","id":10190,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.10072, \"percentile\": 0.95649}"},{"alert":0,"cve":"CVE-2024-6047","id":7739,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.10072, \"percentile\": 0.95646}"},{"alert":1,"cve":"CVE-2024-6047","id":6008,"kind":"cna","observed_at":1793744401,"payload":"{\"containers\": {\"adp\": [{\"affected\": [{\"cpes\": [\"cpe:2.3:h:geovision:gv-dsp_lpr_v2:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-dsp_lpr_v2\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-bx1500:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-bx1500\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-cb220:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-cb220\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-ebl1100:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-ebl1100\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-efd1100:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-efd1100\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-fd2410:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-fd2410\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-fd3400:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-fd3400\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-fd3401:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-fd3401\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-fe420:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-fe420\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-vs14:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-vs14\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-vs03:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-vs03\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-vs2410:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-vs2410\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-vs04a:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-vs04a\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-vs04h:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-vs04h\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-lx_4_v2:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-lx_4_v2\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-lx_4_v3:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-lx_4_v3\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-vs28xx:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-vs28xx\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:h:geovision:gv-vs216xx:0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"gv-vs216xx\", \"vendor\": \"geovision\", \"versions\": [{\"lessThan\": \"*\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}], \"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2024-6047\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-05-07T17:12:10.191958Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2025-05-07\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6047\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T22:56:21.904Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"url\": \"https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet\"}, {\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6047\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-05-07T00:00:00.000Z\", \"value\": \"CVE-2024-6047 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}, {\"providerMetadata\": {\"dateUpdated\": \"2024-08-01T21:25:03.254Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"third-party-advisory\", \"x_transferred\"], \"url\": \"https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html\"}, {\"tags\": [\"third-party-advisory\", \"x_transferred\"], \"url\": \"https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html\"}], \"title\": \"CVE Program Container\"}], \"cna\": {\"affected\": [{\"defaultStatus\": \"unaffected\", \"product\": \"GV_DSP_LPR_V2\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV_IPCAMD_GV_BX1500\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV_IPCAMD_GV_CB220\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV_IPCAMD_GV_EBL1100\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV_IPCAMD_GV_EFD1100\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV_IPCAMD_GV_FD2410\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV_IPCAMD_GV_FD3400\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV_IPCAMD_GV_FE3401\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV_IPCAMD_GV_FE420\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV-VS14_VS14\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV_VS03\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV_VS2410\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV_VS28XX\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV_VS216XX\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV VS04A\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV VS04H\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GVLX 4 V2\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GVLX 4 V3\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV_IPCAMD_GV_BX130\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"GV_GM8186_VS14\", \"vendor\": \"GeoVision\", \"versions\": [{\"status\": \"affected\", \"version\": \"all\"}]}], \"datePublic\": \"2024-06-17T05:48:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.\"}], \"value\": \"Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.\"}], \"impacts\": [{\"capecId\": \"CAPEC-88\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-88 OS Command Injection\"}]}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-78\", \"description\": \"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2024-07-17T07:33:54.631Z\", \"orgId\": \"cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e\", \"shortName\": \"twcert\"}, \"references\": [{\"tags\": [\"third-party-advisory\"], \"url\": \"https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html\"}, {\"tags\": [\"third-party-advisory\"], \"url\": \"https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html\"}], \"solutions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"All affected products are no longer in surport. Please retire or replace them.\"}], \"value\": \"All affected products are no longer in surport. Please retire or replace them.\"}], \"source\": {\"advisory\": \"TVN-202406015\", \"discovery\": \"EXTERNAL\"}, \"tags\": [\"unsupported-when-assigned\"], \"title\": \"GeoVision EOL device - OS Command Injection\", \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}}}, \"cveMetadata\": {\"assignerOrgId\": \"cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e\", \"assignerShortName\": \"twcert\", \"cveId\": \"CVE-2024-6047\", \"datePublished\": \"2024-06-17T05:48:42.779Z\", \"dateReserved\": \"2024-06-17T02:00:24.960Z\", \"dateUpdated\": \"2025-10-21T22:56:21.904Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2024-6047","id":5516,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.10072, \"percentile\": 0.95638}"},{"alert":0,"cve":"CVE-2024-6047","id":3298,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.10072, \"percentile\": 0.95632}"},{"alert":1,"cve":"CVE-2024-6047","id":433,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2024-6047\", \"cwes\": [\"CWE-78\"], \"dateAdded\": \"2025-05-07\", \"dueDate\": \"2025-05-28\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://dlcdn.geovision.com.tw/TechNotice/CyberSecurity/Security_Advisory_IP_Device_2024-11.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2024-6047\", \"product\": \"Multiple Devices\", \"requiredAction\": \"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.\", \"vendorProject\": \"GeoVision\", \"vulnerabilityName\": \"GeoVision Devices OS Command Injection Vulnerability\"}"}],"record":{"affected":[{"defaultStatus":"unaffected","product":"GV_DSP_LPR_V2","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_BX1500","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_CB220","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_EBL1100","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_EFD1100","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_FD2410","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_FD3400","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_FE3401","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_FE420","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV-VS14_VS14","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_VS03","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_VS2410","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_VS28XX","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_VS216XX","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV VS04A","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV VS04H","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GVLX 4 V2","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GVLX 4 V3","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_BX130","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_GM8186_VS14","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]}],"cna":{"containers":{"adp":[{"affected":[{"cpes":["cpe:2.3:h:geovision:gv-dsp_lpr_v2:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-dsp_lpr_v2","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-bx1500:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-bx1500","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-cb220:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-cb220","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-ebl1100:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-ebl1100","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-efd1100:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-efd1100","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-fd2410:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-fd2410","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-fd3400:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-fd3400","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-fd3401:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-fd3401","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-fe420:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-fe420","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-vs14:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-vs14","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-vs03:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-vs03","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-vs2410:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-vs2410","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-vs04a:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-vs04a","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-vs04h:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-vs04h","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-lx_4_v2:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-lx_4_v2","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-lx_4_v3:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-lx_4_v3","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-vs28xx:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-vs28xx","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:geovision:gv-vs216xx:0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gv-vs216xx","vendor":"geovision","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]}],"metrics":[{"other":{"content":{"id":"CVE-2024-6047","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-05-07T17:12:10.191958Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2025-05-07","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6047"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2025-10-21T22:56:21.904Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"url":"https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet"},{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6047"}],"timeline":[{"lang":"en","time":"2025-05-07T00:00:00.000Z","value":"CVE-2024-6047 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"},{"providerMetadata":{"dateUpdated":"2024-08-01T21:25:03.254Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["third-party-advisory","x_transferred"],"url":"https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html"},{"tags":["third-party-advisory","x_transferred"],"url":"https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"GV_DSP_LPR_V2","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_BX1500","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_CB220","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_EBL1100","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_EFD1100","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_FD2410","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_FD3400","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_FE3401","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_FE420","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV-VS14_VS14","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_VS03","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_VS2410","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_VS28XX","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_VS216XX","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV VS04A","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV VS04H","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GVLX 4 V2","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GVLX 4 V3","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_IPCAMD_GV_BX130","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]},{"defaultStatus":"unaffected","product":"GV_GM8186_VS14","vendor":"GeoVision","versions":[{"status":"affected","version":"all"}]}],"datePublic":"2024-06-17T05:48:00.000Z","descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device."}],"value":"Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device."}],"impacts":[{"capecId":"CAPEC-88","descriptions":[{"lang":"en","value":"CAPEC-88 OS Command Injection"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2024-07-17T07:33:54.631Z","orgId":"cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e","shortName":"twcert"},"references":[{"tags":["third-party-advisory"],"url":"https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html"},{"tags":["third-party-advisory"],"url":"https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"All affected products are no longer in surport. Please retire or replace them."}],"value":"All affected products are no longer in surport. Please retire or replace them."}],"source":{"advisory":"TVN-202406015","discovery":"EXTERNAL"},"tags":["unsupported-when-assigned"],"title":"GeoVision EOL device - OS Command Injection","x_generator":{"engine":"Vulnogram 0.2.0"}}},"cveMetadata":{"assignerOrgId":"cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e","assignerShortName":"twcert","cveId":"CVE-2024-6047","datePublished":"2024-06-17T05:48:42.779Z","dateReserved":"2024-06-17T02:00:24.960Z","dateUpdated":"2025-10-21T22:56:21.904Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794198001,"cve":"CVE-2024-6047","description":"Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.","epss":{"date":"2026-11-12","epss":0.10072,"percentile":0.95696},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2024-6047","cwes":["CWE-78"],"dateAdded":"2025-05-07","dueDate":"2025-05-28","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://dlcdn.geovision.com.tw/TechNotice/CyberSecurity/Security_Advisory_IP_Device_2024-11.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2024-6047","product":"Multiple Devices","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","shortDescription":"Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.","vendorProject":"GeoVision","vulnerabilityName":"GeoVision Devices OS Command Injection Vulnerability"},"kev_checked":1794522003,"products":"GeoVision GV_DSP_LPR_V2, GeoVision GV_IPCAMD_GV_BX1500, GeoVision GV_IPCAMD_GV_CB220, GeoVision GV_IPCAMD_GV_EBL1100, GeoVision GV_IPCAMD_GV_EFD1100, GeoVision GV_IPCAMD_GV_FD2410, GeoVision GV_IPCAMD_GV_FD3400, GeoVision GV_IPCAMD_GV_FE3401, GeoVision GV_IPCAMD_GV_FE420, GeoVision GV-VS14_VS14, GeoVision GV_VS03, GeoVision GV_VS2410, GeoVision GV_VS28XX, GeoVision GV_VS216XX, GeoVision GV VS04A, GeoVision GV VS04H, GeoVision GVLX 4 V2, GeoVision GVLX 4 V3, GeoVision GV_IPCAMD_GV_BX130, GeoVision GV_GM8186_VS14","references":["https://www.twcert.org.tw/tw/cp-132-7883-f5635-1.html","https://www.twcert.org.tw/en/cp-139-7884-c5a8b-2.html","https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnet","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6047"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"twcert","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"All affected products are no longer in surport. Please retire or replace them.","state":"PUBLISHED","title":"GeoVision EOL device - OS Command Injection","updated_at":1794500401,"workarounds":""},"sources":[]}