Siemens Siveillance
Both the Event Server and the Management Server components of Siveillance Video deserialize data without sufficient validations. This could allow an authenticated remote attacker to execute code on the affected system. Siemens has released updates for the affected products and recommends to update to the latest versions. The provided cumulative hotfix releases include the fixes for both Event Server (ES) and Management Server (MS). Ensure to apply the fixes on all relevant servers in your deployment.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-30899US | high8.8 | — | ||
A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versions < V20.3 HotfixRev12), Siveillance Video… | ||||
| CVE-2023-30898US | high8.8 | — | ||
A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versions < V20.3 HotfixRev12), Siveillance Video… | ||||
references
External citations — patches, advisories, analysis.
- SSA-789345: Code Execution Vulnerabilities in Siveillance Video Event and Management Servers - CSAF Versionself
- SSA-789345: Code Execution Vulnerabilities in Siveillance Video Event and Management Servers - HTML Versionself
- SSA-789345: Code Execution Vulnerabilities in Siveillance Video Event and Management Servers - PDF Versionself
- SSA-789345: Code Execution Vulnerabilities in Siveillance Video Event and Management Servers - TXT Versionself
- ICS Advisory ICSA-23-131-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-131-03 - Web Versionself
- Recommended Practicesexternal
remediations (16)
- FixedSiveillance Video 2020 R2
Update to V20.2 HotfixRev14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109781128/ - FixedSiveillance Video 2020 R2
Update to V20.2 HotfixRev14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109781128/ - FixedSiveillance Video 2020 R3
Update to V20.3 HotfixRev12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791980/ - FixedSiveillance Video 2020 R3
Update to V20.3 HotfixRev12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791980/ - FixedSiveillance Video 2021 R1
Update to V21.1 HotfixRev12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801904/ - FixedSiveillance Video 2021 R1
Update to V21.1 HotfixRev12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801904/ - FixedSiveillance Video 2021 R2
Update to V21.2 HotfixRev8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805466/ - FixedSiveillance Video 2021 R2
Update to V21.2 HotfixRev8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805466/ - FixedSiveillance Video 2022 R1
Update to V22.1 HotfixRev7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810201/ - FixedSiveillance Video 2022 R1
Update to V22.1 HotfixRev7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810201/ - FixedSiveillance Video 2022 R2
Update to V22.2 HotfixRev5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812608/ - FixedSiveillance Video 2022 R2
Update to V22.2 HotfixRev5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812608/ - FixedSiveillance Video 2022 R3
Update to V22.3 HotfixRev2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109815353/ - FixedSiveillance Video 2022 R3
Update to V22.3 HotfixRev2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109815353/ - FixedSiveillance Video 2023 R1
Update to V23.1 HotfixRev1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109820659/ - FixedSiveillance Video 2023 R1
Update to V23.1 HotfixRev1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109820659/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan