ExploitPublished 26 Aug 2025

GeoVision ASManager Windows Application 6.1.2.0 · Credentials Disclosure

Source Exploit-DB RSS Feed

Severity

Medium

Rated by Threat Radar

Data as of 23 Nov 2025, 23:47 UTC

What to do

AI-suggested

Restrict local access to systems running GeoVision ASManager to trusted personnel only, using strong physical and logical access controls.
Implement strict endpoint security measures including application whitelisting, anti-malware, and behavior monitoring to detect suspicious activities related to credential access.
Audit and review user permissions and access logs regularly to identify unauthorized access attempts.
Isolate systems running GeoVision ASManager from general user environments to minimize exposure.
Prepare for rapid deployment of official patches once released by GeoVision by maintaining an up-to-date asset inventory and patch management process.
Consider encrypting sensitive credential storage if supported by the application or underlying OS.
Educate staff on the risks of local credential theft and enforce policies to prevent unauthorized physical or remote local access.
Monitor threat intelligence feeds for updates on exploit activity or patch releases related to this vulnerability.

Description

GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure

Impact

For European organizations, this vulnerability could lead to unauthorized disclosure of credentials used in access control systems, potentially allowing attackers to escalate privileges or move laterally within networks. This is particularly concerning for organizations managing physical security or sensitive facilities using GeoVision ASManager. Confidentiality breaches could result in unauthorized access to restricted areas or systems, undermining both physical and cybersecurity postures. The local access requirement reduces the risk of remote exploitation but increases the importance of internal security controls and endpoint protection. If exploited, attackers could gain footholds that facilitate further attacks or data breaches. The absence of a patch means organizations must rely on compensating controls, increasing operational overhead. Critical infrastructure, government facilities, and enterprises with high security demands in Europe could face elevated risks if this vulnerability is exploited.

Indicators of compromise

Exploit source code

Exploit code for GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure1,955 characters

# Exploit Title: GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure
# Date: 19-MAR-2025
# Exploit Author: Giorgi Dograshvili [DRAGOWN]
# Vendor Homepage: https://www.geovision.com.tw/
# Software Link: https://www.geovision.com.tw/download/product/
# Version: 6.1.2.0 or less
# Tested on: Windows 10 | Kali Linux
# CVE : CVE-2025-26263
# PoC: https://github.com/DRAGOWN/CVE-2025-26263

GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less, is vulnerab…

References

Community reviews

Loading reviews…