A remote code execution vulnerability exists in the Notification Settings component of GeoVision GV-ASWeb version 6.2.0. An authenticated user with System Setting permissions can exploit this flaw by sending a specially crafted HTTP POST request to the ASWebCommon.srf backend endpoint, bypassing frontend restrictions to execute arbitrary commands on the server.