Executive brief
GeoVision Edge Recording Manager (ERM) is a video management software used to monitor and manage security camera recordings. A security flaw in version 2.3.1 allows any user with access to the computer to gain full administrative control over the entire operating system. This could lead to unauthorized access to sensitive data, the ability to disable security software, or the complete takeover of the workstation or server.
Technical details
GeoVision Edge Recording Manager (ERM) v2.3.1 is vulnerable to local privilege escalation due to improper privilege management (CWE-250). During installation, the software creates a Windows service running as LocalSystem; subsequently, when the application is launched, child processes inherit these SYSTEM-level privileges instead of the logged-in user's context. An attacker can exploit this by using built-in application functions like 'Import Data' that trigger standard Windows file dialogs. Because these dialogs run with SYSTEM permissions, a local user can perform file operations (create, delete, or modify) on protected system files or execute arbitrary programs with full administrative rights.
Affected products
- GeoVision (GV) Edge Recording Manager (ERM) 2.3.1
Timeline
- 2026-03-23: advisory: NVD publication date