{“lastseen”:”2025-08-26T16:02:15″,”description”:”GeoVision…………………………………………”,”published”:”2025-08-26T00:00:00″,”modified”:”2025-08-26T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 GeoVision ASManager Windows Application 6.1.2.0 Credential Disclosure”,”source”:””,”references”:””,”id”:”PACKETSTORM:208856″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2025-26263″],”sourceData”:”# Exploit Title: GeoVision ASManager Windows Application 6.1.2.0 – Credentials Disclosure\\n # Date: 19-MAR-2025\\n # Exploit Author: Giorgi Dograshvili [DRAGOWN]\\n # Vendor Homepage: https:\/\/www.geovision.com.tw\/\\n # Software Link: https:\/\/www.geovision.com.tw\/download\/product\/\\n # Version: 6.1.2.0 or less\\n # Tested on: Windows 10 | Kali Linux\\n # CVE : CVE-2025-26263\\n # PoC: https:\/\/github.com\/DRAGOWN\/CVE-2025-26263\\n \\n GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less, is vulnerable to credentials disclosure due to improper memory handling in the ASManagerService.exe process.\\n \\n Requirements\\n To perform successful attack an attacker requires:\\n – System level access to the GV-ASManager windows desktop application with the version 6.1.2.0 or less;\\n – A high privilege account to dump the memory.\\n \\n Impact\\n The vulnerability can be leveraged to perform the following unauthorized actions:\\n – An attacker with high privilege system user, who isn’t authorized to access GeoVision ASManager, is able to:\\n — Dump ASManager accounts credentials;\\n — Authenticate in ASManager.\\n – After the authenticating in ASManager, an attacker will be able to:\\n — Access the resources such as monitoring cameras, access cards, parking cars, employees and visitors, etc.\\n — Make changes in data and service network configurations such as employees, access card security information, IP addresses and configurations, etc.\\n — Disrupt and disconnect services such as monitoring cameras, access controls.\\n — Clone and duplicate access control data for further attack scenarios.\\n \\n PoC\\n The steps for a successful exploitation are described in the following GitHub article with screenshots:\\n – https:\/\/github.com\/DRAGOWN\/CVE-2025-26263\\n \\n After a successful attack, you will get administrative access to:\\n – ASManager – Access \\u0026 Security Management software in OS\\n – ASWeb – Access \\u0026 Security Management \\n – TAWeb – Time and Attendance Management \\n – VMWeb – Visitor Management”,”sourceHref”:”https:\/\/packetstorm.news\/download\/208856″,”cvss”:{“score”:5.1,”severity”:”MEDIUM”,”vector”:”CVSS:3.1\/AV:L\/AC:L\/PR:H\/UI:N\/S:U\/C:H\/I:L\/A:N”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/packetstorm.news\/files\/id\/208856\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-08-26T16:02:15″,”description”:”GeoVision…………………………………………”,”published”:”2025-08-26T00:00:00″,”modified”:”2025-08-26T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 GeoVision ASManager Windows Application 6.1.2.0 Credential Disclosure”,”source”:””,”references”:””,”id”:”PACKETSTORM:208856″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2025-26263″],”sourceData”:”# Exploit Title: GeoVision ASManager Windows Application 6.1.2.0 – Credentials Disclosure\\n # Date: 19-MAR-2025\\n # Exploit Author: Giorgi…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,109,12,21,13,53,7,11,5],"class_list":["post-14394","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-cvss-51","tag-exploit","tag-medium","tag-news","tag-packetstorm","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n