Access Control Flaw in Geovision GV-ASWeb Software
CVE-2024-56898
8.8HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2024-56898?
An access control vulnerability exists in Geovision's GV-ASWeb software, specifically in version 6.1.0.0 and earlier. This flaw allows attackers with basic privileges to exploit the system by sending specially crafted HTTP requests. Such unauthorized access enables them to create and manage user accounts, potentially compromising the integrity and security of the system.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.