GeoVision ASManager Windows Application 6.1.2.0 · Credentials Disclosure
Source Exploit-DB RSS Feed
Rated by Threat Radar
Data as of 23 Nov 2025, 23:47 UTC
What to do
AI-suggested
1. Restrict local access to systems running GeoVision ASManager to trusted personnel only, using strong physical and logical access controls. 2. Implement strict endpoint security measures including application whitelisting, anti-malware, and behavior monitoring to detect suspicious activities related to credential access. 3. Audit and review user permissions and access logs regularly to identify unauthorized access attempts. 4. Isolate systems running GeoVision ASManager from general user environments to minimize exposure. 5. Prepare for rapid deployment of official patches once released by GeoVision by maintaining an up-to-date asset inventory and patch management process. 6. Consider encrypting sensitive credential storage if supported by the application or underlying OS. 7. Educate staff on the risks of local credential theft and enforce policies to prevent unauthorized physical or remote local access. 8. Monitor threat intelligence feeds for updates on exploit activity or patch releases related to this vulnerability.
Description
GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure
Indicators of compromise
Exploit source code
# Exploit Title: GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure
# Date: 19-MAR-2025
# Exploit Author: Giorgi Dograshvili [DRAGOWN]
# Vendor Homepage: https://www.geovision.com.tw/
# Software Link: https://www.geovision.com.tw/download/product/
# Version: 6.1.2.0 or less
# Tested on: Windows 10 | Kali Linux
# CVE : CVE-2025-26263
# PoC: https://github.com/DRAGOWN/CVE-2025-26263
GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less, is vulnerab…