The vulnerability is a stack-based buffer overflow in the GeoWebServer.exe process that handles default web server connection ports. An attacker sending a crafted request could overflow the buffer and execute arbitrary code, potentially taking full control of the affected system. This flaw is classified as CWE‑121 and can lead to remote code execution without requiring authentication.

Geovision Inc.'s GV‑ASManager product is vulnerable on Windows platforms in versions 6.3.0 and 6.4.0. These versions run the GeoWebServer.exe service exposed on the default web server ports.

The CVSS score is 7.5, indicating a high risk. EPSS is not available, so exploitation probability cannot be quantified, and the vulnerability is not listed in CISA KEV. The attack vector is most likely remote over the network using the default web server ports, and the vulnerability can be exploited by a remote attacker who can send specially crafted input to the web server.