MEIFP – Most Exploited Internet-Facing Products

GeoVision

Products: GV VS04A · GV VS04H · GV-DSP_LPR_V3 · GV-VS11 · GV-VS12 · GV-VS14_VS14 · GVLX 4 V2 · GVLX 4 V3 · GV_DSP_LPR_V2 · GV_GM8186_VS14 · GV_IPCAMD_GV_BX130 · GV_IPCAMD_GV_BX1500 · GV_IPCAMD_GV_CB220 · GV_IPCAMD_GV_EBL1100 · GV_IPCAMD_GV_EFD1100 · GV_IPCAMD_GV_FD2410 · GV_IPCAMD_GV_FD3400 · GV_IPCAMD_GV_FE3401 · GV_IPCAMD_GV_FE420 · GV_VS03

81.1

Score

CVEs

Active

PoC

KEV

#30

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2024-11120	2024-11-15	9.8v3.1	ACTIVE		Low	None	YES	40.6	GV-DSP_LPR_V3GV-VS11GV-VS12GVLX 4 V2GVLX 4 V3	Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related
CVE-2024-6047	2024-06-17	9.8v3.1	ACTIVE		Low	None	YES	40.6	GV VS04AGV VS04HGV-VS14_VS14GV_DSP_LPR_V2GV_GM8186_VS14GV_IPCAMD_GV_BX130GV_IPCAMD_GV_BX1500GV_IPCAMD_GV_CB220GV_IPCAMD_GV_EBL1100GV_IPCAMD_GV_EFD1100	Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3