ICSA-18-128-02 Siemens Siveillance VMS (Update A)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-7891US | high8.1 | — | ||
The Milestone XProtect Video Management Software (Corporate, Expert, Professional+, Express+, Essential+) 2016 R1 (10.0.a) to 2018 R1 (12.1a) contains .NET Remoting endpoints that… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- MitigationSiveillance VMS 2016 R1 and prior
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 7474/TCP and port 9993/TCP
- MitigationSiveillance VMS 2016 R2
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 7474/TCP and port 9993/TCP
- MitigationSiveillance VMS 2016 R3
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 7474/TCP and port 9993/TCP
- MitigationSiveillance VMS 2017 R1
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 7474/TCP and port 9993/TCP
- MitigationSiveillance VMS 2017 R2
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 7474/TCP and port 9993/TCP
- MitigationSiveillance VMS 2018 R1
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 7474/TCP and port 9993/TCP
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan