GeoVision ASManager Windows Application 6.1.2.0 · Remote Code Execution (RCE)
Source Exploit-DB RSS Feed
Rated by Threat Radar
Data as of 23 Nov 2025, 23:47 UTC
What to do
AI-suggested
Given the lack of official patches, European organizations should immediately implement network segmentation to isolate GeoVision ASManager servers from general IT infrastructure and the internet. Employ strict firewall rules to restrict inbound and outbound traffic to only trusted sources. Monitor network traffic and system logs for unusual activities indicative of exploitation attempts. Disable or limit remote access to the ASManager application where possible. Employ application whitelisting and endpoint detection and response (EDR) solutions to detect and block suspicious behaviors. Regularly back up surveillance data and system configurations to enable recovery in case of compromise. Engage with GeoVision support channels to obtain any available vendor guidance or interim fixes. Finally, plan for rapid deployment of patches once released and conduct thorough vulnerability scanning to identify all instances of the affected application within the environment.
Description
GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)
Indicators of compromise
Exploit source code
# Exploit Title: GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)
# Date: 19-MAR-2025
# Exploit Author: Giorgi Dograshvili [DRAGOWN]
# Vendor Homepage: https://www.geovision.com.tw/
# Software Link: https://www.geovision.com.tw/download/product/
# Version: 6.1.2.0 or less
# Tested on: Windows 10 | Kali Linux
# CVE : CVE-2025-26264
# PoC: https://github.com/DRAGOWN/CVE-2025-26264
GeoVision GV-ASWeb with the version 6.1.2.0 or less, contains a Remote Code Execution (R…