Siemens Siveillance Video DLNA Server
Siemens has released hotfixes for Siveillance Video DLNA Server, which fix a path traversal vulnerability that could allow an authenticated remote attacker to access sensitive information on the DLNA server. Siemens has released updates for the DLNA server and recommends to apply the update on all installations where DLNA server used.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-42021US | high7.5 | — | ||
A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2), Siveillance Video DLNA Server (2019 R3), Siveillance Video… | ||||
references
External citations — patches, advisories, analysis.
- SSA-755517: Path Traversal Vulnerability in Siveillance Video DLNA Server - CSAF Versionself
- SSA-755517: Path Traversal Vulnerability in Siveillance Video DLNA Server - PDF Versionself
- SSA-755517: Path Traversal Vulnerability in Siveillance Video DLNA Server - TXT Versionself
- ICS Advisory ICSA-21-315-13 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-315-13 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationSiveillance Video DLNA Server
Disable the DLNA Server, if not in use. Note: By default, the DLNA server is not installed with the other components of Siveillance Video
- FixedSiveillance Video DLNA Server
Apply the hotfix using the latest available installer for the DLNA Server
https://support.industry.siemens.com/cs/ww/en/view/109766085/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan