ZeroDay Findings
Sign inSign up

Findings

CVE-2024-11120

GeoVision Devices OS Command Injection Vulnerability

Published Nov 14, 2024 · updated Jun 16, 2026 · geovision gv-vs12 firmware

Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports.

Timeline

Detection, updates, and resolution for this record.

  1. Nov 14, 2024 · Catalog

    Detected

    Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports.

  2. May 7, 2025 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  3. May 28, 2025 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA due date May 28, 2025

Affected

  • cpe geovision/gv-dsp lpr firmwareversion unspecified
  • cpe geovision/gv-vs11 firmwareversion unspecified
  • cpe geovision/gv-vs12 firmwareversion unspecified
  • cpe geovision/gvlx 4 firmwareversion unspecified
  • vendor GeoVision Multiple Devicesversion unspecified

Sources

  • CISA KEVCVE-2024-11120

    Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

    cisa.gov
  • CVE.orgCVE-2024-11120

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2024-11120

    30-day exploitation probability 28.4%

    first.org
  • NIST NVDCVE-2024-11120

    Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we ha

    nvd.nist.gov

References