Skip to main content
ExploitPublished

GeoVision ASManager Windows Application 6.1.2.0 · Remote Code Execution (RCE)

Source Exploit-DB RSS Feed

0
Severity
Critical

Rated by Threat Radar

Data as of 23 Nov 2025, 23:47 UTC

What to do

AI-suggested

Given the lack of official patches, European organizations should immediately implement network segmentation to isolate GeoVision ASManager servers from general IT infrastructure and the internet. Employ strict firewall rules to restrict inbound and outbound traffic to only trusted sources. Monitor network traffic and system logs for unusual activities indicative of exploitation attempts. Disable or limit remote access to the ASManager application where possible. Employ application whitelisting and endpoint detection and response (EDR) solutions to detect and block suspicious behaviors. Regularly back up surveillance data and system configurations to enable recovery in case of compromise. Engage with GeoVision support channels to obtain any available vendor guidance or interim fixes. Finally, plan for rapid deployment of patches once released and conduct thorough vulnerability scanning to identify all instances of the affected application within the environment.

Description

GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)

Indicators of compromise

Exploit source code

Exploit code for GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)1,560 characters
# Exploit Title: GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)
# Date: 19-MAR-2025
# Exploit Author: Giorgi Dograshvili [DRAGOWN]
# Vendor Homepage: https://www.geovision.com.tw/
# Software Link: https://www.geovision.com.tw/download/product/
# Version: 6.1.2.0 or less
# Tested on: Windows 10 | Kali Linux
# CVE : CVE-2025-26264
# PoC: https://github.com/DRAGOWN/CVE-2025-26264

GeoVision GV-ASWeb with the version 6.1.2.0 or less, contains a Remote Code Execution (R…

References

Community reviews

Loading reviews…