Description (CNA)
GV Edge Recording Manager (ERM) v2.3.1 improperly runs application components with SYSTEM-level privileges, allowing any local user to gain full control of the operating system. During installation, ERM creates a Windows service that runs under the LocalSystem account. When the ERM application is launched, related processes are spawned under SYSTEM privileges rather than the security context of the logged-in user. Functions such as 'Import Data' open a Windows file dialog operating with SYSTEM permissions, enabling modification or deletion of protected system files and directories. Any ERM function invoking Windows file open/save dialogs exposes the same risk. This vulnerability allows local privilege escalation and may result in full system compromise.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GeoVision / GV-Edge Recording Manager | affected 2.3.1; unaffected 2.3.2 |
CWE
CWE-250
References
ADP enrichment
No English description supplied.
No references supplied.