Gv Remote E Map
Monthly
Local DLL search-order hijacking in the GeoVision GV-Remote E-Map Windows desktop application allows an attacker who already holds a local foothold with write access to a directory the application searches to execute arbitrary code in the security context of the GV-Remote E-Map process. The weakness is CWE-427 and is scored CVSS 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), so it is not remotely exploitable and requires host-local write permission plus a normal application launch for the hijacked library to load. No public exploit code has been identified at time of analysis and there is no CISA KEV confirmation of active exploitation, and the practical risk is largely determined by whether the application's install and working directories are ACL-restricted against standard users.
Local DLL search-order hijacking in the GeoVision GV-Remote E-Map Windows desktop application allows an attacker who already holds a local foothold with write access to a directory the application searches to execute arbitrary code in the security context of the GV-Remote E-Map process. The weakness is CWE-427 and is scored CVSS 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), so it is not remotely exploitable and requires host-local write permission plus a normal application launch for the hijacked library to load. No public exploit code has been identified at time of analysis and there is no CISA KEV confirmation of active exploitation, and the practical risk is largely determined by whether the application's install and working directories are ACL-restricted against standard users.