CVE-2024-11120

criticalpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.284 · 98 %ileEURUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV

Likely / severe?

28.4% (98th) EPSS

CVSS 9.8 · critical

Is it mine?

14 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

added 2025-05-07remediate by 2025-05-28

required action Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

EPSS · scored 2026-10-22

GeoVision Devices OS Command Injection Vulnerability

Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · twcert@cert.org.twexploitability 3.9 · impact 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-78USCWE-78US

ATT&CK techniques

ATT&CK techniques this enables or maps to.

affected products (14)

Products and version ranges known to be affected.

GeoVision GV-DSP_LPR_V3≤ 0enisa_euvdEU
GeoVision GV-VS11≤ 0enisa_euvdEU
GeoVision GV-VS12≤ 0enisa_euvdEU
GeoVision GVLX 4 V2≤ 0enisa_euvdEU
GeoVision GVLX 4 V3≤ 0enisa_euvdEU
GeoVision GV-DSP LPR≤ 3fstec_bduRU
GeoVision GV-VS11all versionsfstec_bduRU
GeoVision GV-VS12all versionsfstec_bduRU
GeoVision GVLX 4≤ 3fstec_bduRU
GeoVision GVLX 4≤ 2fstec_bduRU
geovision gv-dsp lpr firmwareall versionsnvdUScpe:2.3:o:geovision:gv-dsp_lpr_firmware:*:*:*:*:*:*:*:*
geovision gv-vs11 firmwareall versionsnvdUScpe:2.3:o:geovision:gv-vs11_firmware:*:*:*:*:*:*:*:*
geovision gv-vs12 firmwareall versionsnvdUScpe:2.3:o:geovision:gv-vs12_firmware:*:*:*:*:*:*:*:*
geovision gvlx 4 firmwareall versionsnvdUScpe:2.3:o:geovision:gvlx_4_firmware:*:*:*:*:*:*:*:*

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2024-11-15modified 2026-06-17

references (8)

External citations — patches, advisories, analysis.

https://www.twcert.org.tw/en/cp-139-8237-26d7a-2.html cnnvd
https://www.twcert.org.tw/tw/cp-132-8236-d4836-1.html cnnvd
https://www.twcert.org.tw/en/cp-139-8237-26d7a-2.html enisa_euvd
https://www.twcert.org.tw/tw/cp-132-8236-d4836-1.html enisa_euvd
https://www.akamai.com/blog/security-research/active-exploitation-mirai-geovision-iot-botnetExploitThird Party Advisorynvd
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-11120US Government Resourcenvd
https://www.twcert.org.tw/en/cp-139-8237-26d7a-2.htmlThird Party Advisorynvd
https://www.twcert.org.tw/tw/cp-132-8236-d4836-1.htmlThird Party Advisorynvd

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan