A high-severity out-of-bounds access vulnerability in GeoVision GeoWebPlayer allows remote attackers to disrupt system availability and potentially compromise system integrity.

The vulnerability involves improper validation of an array index (CWE-129) during the processing of a 'pause' command. This index-out-of-bound condition can lead to memory corruption or application crashes.

The vulnerability carries a CVSS score of 8.3, indicating a high risk to the availability and stability of surveillance systems. Successful exploitation could result in service denial or potential code execution, leading to significant operational downtime and the loss of critical video monitoring capabilities.

Immediate Action: Update the GeoWebPlayer component to version V1.1.3.0 or later to patch the index validation logic.

Proactive Monitoring: Monitor system logs for repeated application crashes or unexpected service restarts, which may indicate an attempt to trigger this crash condition.

Compensating Controls: Restrict network access to the affected VMS interfaces to authorized personnel only, reducing the attack surface available to potential adversaries.

Public Exploit Available: false

Given the potential for system disruption, immediate patching is required. Organizations should treat this as a critical maintenance task to ensure the continued stability and security of their video management infrastructure.