CVE Intelligence
Home / CVEs

Exploited vulnerabilities (CISA KEV)

CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.

Severity
Clear

2 result(s)

Export this search: RSS · CSV · STIX
CVE-2024-11120 Critical · 9.8 KEV High · 63 CWE-78 Nov 14, 2024
GeoVision Devices OS Command Injection Vulnerability
Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports.
CVE-2024-6047 Critical · 9.8 KEV High · 62 CWE-78 Jun 17, 2024
GeoVision Devices OS Command Injection Vulnerability
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.