SSA-825228: Potential Remote Code Execution in Siveillance Video Management Servers
view advisory published 2026-08-11
Siveillance Video Management Servers contains a vulnerability that could allow a Remote Code Execution attack. Siemens has released new versions for the affected products and recommends to update to the latest versions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-3014US | — | — | ||
Milestone
has released a new version of XProtect® (and several cumulative patch updates)
which fix security vulnerability in Management Server API.
The vulnerability
causes user… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (3)
- FixedSiveillance Video V2023 R3
Update to V23.3 HotfixRev27 or later version
https://support.industry.siemens.com/cs/ww/en/view/109827783/ - FixedSiveillance Video V2024 R1
Update to V24.1 HotfixRev16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109976123/ - FixedSiveillance Video V2025
Update to V25.1 HotfixRev15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109988670/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan