Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2018-25118

GeoVision Command Injection RCE via /PictureCatch.cgi

GeoVision embedded IP devices, confirmed on GV-BX1500 and GV-MFD1501, contain a remote command injection vulnerability via /PictureCatch.cgi that enables an attacker to execute arbitrary commands on the device. The vulnerable models have been declared end-of-life (EOL) by the vendor. VulnCheck has observed this vulnerability being exploited in the wild as of 2025-10-19 08:55:13.141502 UTC.

CVSS 4.0 · 10 Critical EPSS 1.3% KEV · Not listed
Vendors
Geovision
Products
Gv-bx1500 Gv-bx1500 Firmware Gv-mfd1501
CVE-2024-6047

GeoVision EOL device - OS Command Injection

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

CVSS 3.1 · 9.8 Critical EPSS 10.1% KEV · Listed
Vendors
Geovision
Products
Gv-bx130 Gv-bx130 Firmware Gv-bx1500 and 43 more