Siemens Siveillance Video DLNA Server
Siemens has released hotfixes for Siveillance Video DLNA Server, which fix a path traversal vulnerability that could allow an authenticated remote attacker to access sensitive information on the DLNA server. Siemens has released updates for the DLNA server and recommends to apply the update on all installations where DLNA server used.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-42021US | high7.5 | — | ||
A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2), Siveillance Video DLNA Server (2019 R3), Siveillance Video… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-755517: Path Traversal Vulnerability in Siveillance Video DLNA Server - CSAF Versionself
- SSA-755517: Path Traversal Vulnerability in Siveillance Video DLNA Server - PDF Versionself
- SSA-755517: Path Traversal Vulnerability in Siveillance Video DLNA Server - TXT Versionself
- ICS Advisory ICSA-21-315-13 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-315-13 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationSiveillance Video DLNA Server
Disable the DLNA Server, if not in use. Note: By default, the DLNA server is not installed with the other components of Siveillance Video
- BehobenSiveillance Video DLNA Server
Apply the hotfix using the latest available installer for the DLNA Server
https://support.industry.siemens.com/cs/ww/en/view/109766085/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan