ICSA-18-128-02 Siemens Siveillance VMS (Update A)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-7891US | high8.1 | — | ||
The Milestone XProtect Video Management Software (Corporate, Expert, Professional+, Express+, Essential+) 2016 R1 (10.0.a) to 2018 R1 (12.1a) contains .NET Remoting endpoints that… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- MitigationSiveillance VMS 2016 R1 and prior
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 7474/TCP and port 9993/TCP
- MitigationSiveillance VMS 2016 R2
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 7474/TCP and port 9993/TCP
- MitigationSiveillance VMS 2016 R3
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 7474/TCP and port 9993/TCP
- MitigationSiveillance VMS 2017 R1
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 7474/TCP and port 9993/TCP
- MitigationSiveillance VMS 2017 R2
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 7474/TCP and port 9993/TCP
- MitigationSiveillance VMS 2018 R1
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 7474/TCP and port 9993/TCP
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan