GeoVision GV-BX1500 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:geovision:gv-bx1500_firmware:-:*:*:*:*:*:*:*
part: o version: - update: *
| Vendor | Geovision (417a3123-680c-5577-a6ff-fdce08f8be70) |
|---|---|
| Product | Gv Bx1500 Firmware (93a67785-a341-538f-9bfd-c5bfcf7a0814) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6047 |
vulnerable | 2026-06-08 06:58:17.387232 |
GeoVision EOL device - OS Command Injection
CRITICAL (9.8)
Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.
Published: 2024-06-17T05:48:42.779Z
Updated: 2025-10-21T22:56:21.904Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25118 |
vulnerable | 2026-06-08 05:11:29.419792 |
GeoVision Command Injection RCE via /PictureCatch.cgi
GeoVision embedded IP devices, confirmed on GV-BX1500 and GV-MFD1501, contain a remote command injection vulnerability via /PictureCatch.cgi that enables an attacker to execute arbitrary commands on the device. The vulnerable models have been declared end-of-life (EOL) by the vendor. VulnCheck has observed this vulnerability being exploited in the wild as of 2025-10-19 08:55:13.141502 UTC.
Published: 2025-10-20T21:14:41.304Z
Updated: 2026-04-07T14:03:45.809Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.