Siemens Siveillance Video Camera
Several camera device drivers in the Siveillance Video Device Pack store camera credentials in their log file when authentication fails. This could allow a local attacker to read camera credentials stored in the Recording Server under specific conditions. Siemens has released an update of the Device Pack and recommends to apply this update to all deployments of Siveillance Video. In general, Siemens recommends installing the latest Device Pack which contains the most up-to-date device drivers.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-12569US | — | — | ||
Disclosure
of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera
credentials stored in the Recor… | ||||
references
External citations — patches, advisories, analysis.
- SSA-404759: Information Disclosure Vulnerability in Siveillance Video Camera Drivers - CSAF Versionself
- SSA-404759: Information Disclosure Vulnerability in Siveillance Video Camera Drivers - HTML Versionself
- ICS Advisory ICSA-25-016-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-016-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationSiveillance Video Device Pack
Ensure that only trusted people get local access to the driver log files on the Recording Server
- FixedSiveillance Video Device Pack
Update to V13.5 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan