Beveiligingsadvies

CVE-2025-26264

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-27 00:00:00
Laatst bijgewerkt 2025-03-19 13:35:23
Toegewezen door mitre
CVSS-score 8.8
Status PUBLISHED

Beschrijving

GeoVision GV-ASWeb with the version 6.1.2.0 or less (fixed in 6.2.0), contains a Remote Code Execution (RCE) vulnerability within its Notification Settings feature. An authenticated attacker with "System Settings" privileges in ASWeb can exploit this flaw to execute arbitrary commands on the server, leading to a full system compromise.