---
cve: "CVE-2021-47795"
severity: "HIGH"
cvss: 8.7
epss: "2.6%"
vendor: "GeoVision"
kev: false
exploited: false
published: "2026-01-16 00:16:23"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-10T09:20:37+02:00"
---

# CVE-2021-47795

> 8.7 HIGH · 🧪 PoC

## Beschreibung

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access system files and execute malicious scripts.

## CVSS-Vektor

```
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |

## Referenzen

- <https://www.exploit-db.com/exploits/50211>
- <https://www.geovision.com.tw/cyber_security.php>
- <https://www.vulncheck.com/advisories/geovision-geowebserver-local-file-inclusion>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2021-47795) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_