CVE-2024-12553

Summary

CVE-2024-12553 is a vulnerability affecting GeoVision GV-ASManager. This issue allows remote attackers to disclose sensitive information, including stored credentials, due to a missing authorization check in the GV-ASWeb service. Authentication is required to exploit this vulnerability, but default guest credentials may be used. The flaw results in unauthorized access to functionality, potentially leading to further compromise. This vulnerability was identified as ZDI-CAN-25394.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.