CVE-2024-11120

GeoVision devices have a critical, actively exploited OS command injection vulnerability allowing remote code execution without authentication, potentially impacting DIB organizations using these devices for surveillance or security purposes.

Multiple GeoVision devices are vulnerable to OS command injection, enabling unauthenticated attackers to execute arbitrary commands remotely. This poses a significant risk of data compromise and system takeover, potentially impacting NIST 800-171 compliance and requiring immediate mitigation, including discontinuing product use. DIB organizations should immediately inventory and decommission affected devices.

Shame score — The vulnerability's ease of exploitation, lack of authentication requirement, and active exploitation in the wild demonstrate a serious failure in secure coding practices and device hardening.