GeoVision GV-VMS V20 Stack-Based Buffer Overflow Vulnerability in WebCam Server Feature Allowing Remote Code Execution

A stack-based buffer overflow vulnerability has been identified in GeoVision's Video Monitoring Software (VMS) V20, specifically within the WebCam Server feature that enables remote access. The vulnerability arises from the 'gvapi' endpoint, which uses an authentication mechanism that can be exploited by sending a crafted 'HTTP Authorization' header. The issue is exacerbated by the absence of Address Space Layout Randomization (ASLR) in the web server application, allowing for easier exploitation. When the base64-decoded string exceeds 256 characters, a stack overflow occurs, potentially leading to arbitrary code execution with SYSTEM privileges on the host machine.

Impact

Exploitation of this vulnerability allows for arbitrary code execution with SYSTEM privileges on the machine running the GeoVision VMS V20 WebCam Server.