H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2025-05-07
Last seen2025-05-07

Confidence

—

Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Labels

exploitedkev

CISA KEV context

Vendor / productGeoVision Multiple Devices
Added2025-05-07
Due date2025-05-28
6 recorded

Relationships

mitigatesMitigation
related-toTechnique
related-toTechnique
related-toTechnique
2 external

References

nvd
CVE-2024-11120
open
cwe
CWE-78
open