Vendor
GeoVision
2 of 5 GeoVision CVEs in Patchfirst (40%) are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it. of vulnerabilities exploited in the wild.
- CVEs
- 5
- In CISA KEV
- 240%
- Known ransomware use
- 0
- Median days to KEV
- 248
- from publication
- Latest KEV listing
- 7 May 2025
Products
In KEVOther CVEs
- Multiple Devices In KEV: 2 CVEs: 2
- GeoVision Geowebserver In KEV: 0 CVEs: 1
- GV-ASManager In KEV: 0 CVEs: 1
- GV-BX1500 In KEV: 0 CVEs: 1
Top ATT&CK techniques
What attackers do with GeoVision CVEs- T1133External Remote Services CVEs: 1
- T1498Network Denial of Service CVEs: 1
- T1055Process Injection CVEs: 1
- T1059Command and Scripting Interpreter CVEs: 1
Counts are GeoVision CVEs linked to the technique. Each link’s provenance is on the CVE page.
GeoVision CVEs
5 CVEs, by priority- CVE-2024-11120GeoVision Devices OS Command Injection VulnerabilityGeoVision · Multiple DevicesKEVPublic exploitCritical · 9.8T1133External Remote ServicesT1498Network Denial of Service28.4%Top 1.9%69.5priority
- CVE-2024-6047GeoVision Devices OS Command Injection VulnerabilityGeoVision · Multiple DevicesKEVPublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1055Process Injection10.1%Top 4.4%69.0priority
- CVE-2021-47795GeoVision Geowebserver 5.3.3 - Local FIle InclusionGeovision · GeoVision GeowebserverPublic exploitMedium · 6.22.8%Top 13%66.7priority
- CVE-2018-25118GeoVision Command Injection RCE via /PictureCatch.cgiGeoVision Inc. · GV-BX1500Public exploitCritical · 10.01.3%Top 30%60.9priority
- CVE-2026-108983A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exeGeoVision Inc. · GV-ASManagerCritical · 9.80.4%Top 65%15.5priority