Siemens Siveillance Video Camera
Several camera device drivers in the Siveillance Video Device Pack contain a buffer overflow vulnerability that could be exploited under strict conditions. This could allow an attacker to execute code with the permissions of the Recording Server user. Siemens has released an update of the Device Pack recommends to apply this update to all deployments of Siveillance Video. In general, Siemens recommends installing the latest Device Pack which contains the most up-to-date device drivers.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-3506US | — | — | ||
A possible buffer overflow in selected cameras' drivers from XProtect Device Pack can allow an attacker with access to internal network to execute commands on Recording Server unde… | ||||
references
External citations — patches, advisories, analysis.
- SSA-438590: Buffer Overflow Vulnerability in Siveillance Video Camera Drivers - CSAF Versionself
- SSA-438590: Buffer Overflow Vulnerability in Siveillance Video Camera Drivers - HTML Versionself
- ICS Advisory ICSA-24-289-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-289-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationSiveillance Video Device Pack
When adding new cameras, scan only IP addresses which are confirmed to be valid and trusted devices
- FixedSiveillance Video Device Pack
Update to V13.2 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan