CVE-2018-25118

GeoVision embedded IP devices, confirmed on GV-BX1500 and GV-MFD1501, contain a remote command injection vulnerability via /PictureCatch.cgi that enables an attacker to execute arbitrary commands on the device. The vulnerable models have been declared end-of-life (EOL) by the vendor. VulnCheck has observed this vulnerability being exploited in the wild as of 2025-10-19 08:55:13.141502 UTC.

• CWE-78

• https://github.com/mcw0/PoC/blob/fb06efe05b7e240dc88ff31eb30e1ef345509dce/Geovision-PoC.py#L15
• https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-249a
• https://www.exploit-db.com/exploits/43982
• https://www.geovision.com.tw/blog/?cat=14
• https://www.vulncheck.com/advisories/geovision-command-injection-rce-picture-catch-cgi
• https://github.com/mcw0/PoC/blob/fb06efe05b7e240dc88ff31eb30e1ef345509dce/Geovision-PoC.py#L15
• https://www.exploit-db.com/exploits/43982
• https://www.vulncheck.com/advisories/geovision-command-injection-rce-picture-catch-cgi

Published

Oct 20, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-25112An unauthenticated remote attacker may use an uncontrolled r…7.5
• CVE-2018-25113An unauthenticated path traversal vulnerability exists in Di…8.7
• CVE-2018-25114A remote code execution vulnerability exists within osCommer…9.3
• CVE-2018-25115Multiple D-Link DIR-series routers, including DIR-110, DIR-4…9.8
• CVE-2018-25116MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scri…6.1
• CVE-2018-25117VestaCP commit a3f0fa1 (2018-05-31) up to commit ee03eff (20…9.3
• CVE-2018-25119Nagios Fusion versions prior to 4.1.5 are vulnerable to cros…6.1
• CVE-2018-25120D-Link DNS-343 ShareCenter devices running firmware versions…9.8
• CVE-2018-25121Nagios XI versions prior to 5.4.13 are vulnerable to cross-s…5.4
• CVE-2018-25122Nagios XI versions prior to 5.4.13 contain a remote code exe…8.8
• CVE-2018-25123Nagios XI versions prior to 5.5.7 contain a privilege escala…7.8
• CVE-2018-25124PacsOne Server version 6.6.2 (prior versions are likely affe…8.7