GeoVision EOL devices - OS Command Injection

GeoVision end-of-life devices allow attackers to run harmful commands on the device without logging in. This is a serious flaw that attackers are already actively exploiting to take control of these devices.

OS command injection vulnerability in EOL GeoVision devices permits unauthenticated remote attackers to inject and execute arbitrary system commands via unsanitized input. The attack requires network access to the device but no authentication credentials; successful exploitation grants full system-level access and has been actively weaponized in the wild.