PT-2025-9111 · Geovision · Geovision Asmanager

Published 2025-02-28 · Updated 2025-03-27 · CVE-2025-26263

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions GeoVision ASManager version 6.1.2.0 or less

Description The GeoVision ASManager Windows desktop application is vulnerable to credentials disclosure due to improper memory handling in the ASManagerService.exe process.

Recommendations For GeoVision ASManager version 6.1.2.0 or less, consider updating to a version that fixes the improper memory handling issue in the ASManagerService.exe process as soon as it becomes available. As a temporary workaround, consider restricting access to the ASManagerService.exe process to minimize the risk of credentials disclosure.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-26263

Affected Products

Geovision Asmanager

References · 11

• 🔥 https://github.com/DRAGOWN/CVE-2025-26263 · Exploit
• 🔥 https://exploit-db.com/exploits/52423 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-26263 · Security Note
• https://geovision.com.tw/download/product/GV-ASManager%20%28Access%20Control%29 · Note
• https://twitter.com/CVEnew/status/1895619369285398891 · Twitter Post
• https://t.me/cvenotify/115006 · Telegram Post
• https://t.me/cvenotify/113761 · Telegram Post
• https://twitter.com/DragownSec/status/1905344209550495961 · Twitter Post
• https://twitter.com/cybercronai/status/1895520228055892118 · Twitter Post
• https://geovision.com.tw/download/product/GV-ASManager · Note
• https://t.me/cvedetector/19173 · Telegram Post