The GeoVision GeoWebPlayer is affected by an authentication bypass vulnerability that permits unauthorized actors to access screen capture data and system functions.

This vulnerability is an improper access control issue (CWE-284) where the websocket server fails to authenticate connections. Unauthenticated remote attackers can leverage this to invoke sensitive methods such as 'create' or 'getScreenCapture'.

The exploitation of this vulnerability could lead to a significant breach of confidentiality, as attackers can remotely view live screen content from systems running the affected software. Given its CVSS score of 8.8, this is a High-severity risk that could facilitate reconnaissance or unauthorized surveillance of sensitive operational environments.

Immediate Action: Update the GeoWebPlayer component to version V1.1.3.0 or later as specified in the vendor advisory.

Proactive Monitoring: Review websocket traffic and system access logs for anomalous connection attempts or calls to 'getScreenCapture' functions.

Compensating Controls: Implement network-level access controls to restrict connections to the websocket server to known, trusted management IP addresses.

Public Exploit Available: false

This vulnerability presents a severe risk to privacy and system integrity. Administrators should prioritize the deployment of the V1.1.3.0 update across all GeoVision VMS and Cloud deployments to mitigate the risk of unauthorized remote interaction.