GeoVision Known Exploited Vulnerabilities
Evidence-backed KEV intelligence for GeoVision products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.
Total KEVs
4
In CISA KEV
2
Beyond CISA KEV
2
Sensor Observed
0
Virtual Patch Available
0
GeoVision KEVs Added by Year
Loading...
4 GeoVision KEVs added all time (primary attestation date).
Attested CVEs
| CVE | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2021-47795
GeoVision Geowebserver 5.3.3 - Local FIle Inclusion |
GeoVision Geowebserver | High | Not in CISA | 24 Mar 2026 |
|
CVE-2018-25118
GeoVision Command Injection RCE via /PictureCatch.cgi |
GV-BX1500, GV-MFD1501, GeoVision embedded IP devices | High | Not in CISA | 20 Oct 2025 |
|
CVE-2024-6047
GeoVision EOL device - OS Command Injection |
GV_DSP_LPR_V2, GV_IPCAMD_GV_BX1500, GV_IPCAMD_GV_CB220, GV_IPCAMD_GV_EBL1100, GV_IPCAMD_GV_EFD1100, GV_IPCAMD_GV_FD2410, GV_IPCAMD_GV_FD3400, GV_IPCAMD_GV_FE3401, GV_IPCAMD_GV_FE420, GV-VS14_VS14, GV_VS03, GV_VS2410, GV_VS28XX, GV_VS216XX, GV VS04A, GV VS04H, GVLX 4 V2, GVLX 4 V3, GV_IPCAMD_GV_BX130, GV_GM8186_VS14 | Confirmed | In CISA | 07 May 2025 |
|
CVE-2024-11120
GeoVision EOL devices - OS Command Injection |
GV-VS12, GV-VS11, GV-DSP_LPR_V3, GVLX 4 V2, GVLX 4 V3 | Confirmed | In CISA | 07 May 2025 |
Common Vulnerability Classes (CWE)
- CWE-78 — Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 3
- CWE-22 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 1
Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology