SSA-789345: Code Execution Vulnerabilities in Siveillance Video Event and Management Servers
Both the Event Server and the Management Server components of Siveillance Video deserialize data without sufficient validations. This could allow an authenticated remote attacker to execute code on the affected system. Siemens has released updates for the affected products and recommends to update to the latest versions. The provided cumulative hotfix releases include the fixes for both Event Server (ES) and Management Server (MS). Ensure to apply the fixes on all relevant servers in your deployment.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-30899US | high8.8 | — | ||
A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versions < V20.3 HotfixRev12), Siveillance Video… | ||||
| CVE-2023-30898US | high8.8 | — | ||
A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versions < V20.3 HotfixRev12), Siveillance Video… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-789345: Code Execution Vulnerabilities in Siveillance Video Event and Management Servers - CSAF Versionself
- SSA-789345: Code Execution Vulnerabilities in Siveillance Video Event and Management Servers - HTML Versionself
- SSA-789345: Code Execution Vulnerabilities in Siveillance Video Event and Management Servers - PDF Versionself
- SSA-789345: Code Execution Vulnerabilities in Siveillance Video Event and Management Servers - TXT Versionself
Behebungen (16)
- BehobenSiveillance Video 2020 R2
Update to V20.2 HotfixRev14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109781128/ - BehobenSiveillance Video 2020 R2
Update to V20.2 HotfixRev14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109781128/ - BehobenSiveillance Video 2020 R3
Update to V20.3 HotfixRev12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791980/ - BehobenSiveillance Video 2020 R3
Update to V20.3 HotfixRev12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791980/ - BehobenSiveillance Video 2021 R1
Update to V21.1 HotfixRev12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801904/ - BehobenSiveillance Video 2021 R1
Update to V21.1 HotfixRev12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801904/ - BehobenSiveillance Video 2021 R2
Update to V21.2 HotfixRev8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805466/ - BehobenSiveillance Video 2021 R2
Update to V21.2 HotfixRev8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805466/ - BehobenSiveillance Video 2022 R1
Update to V22.1 HotfixRev7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810201/ - BehobenSiveillance Video 2022 R1
Update to V22.1 HotfixRev7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810201/ - BehobenSiveillance Video 2022 R2
Update to V22.2 HotfixRev5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812608/ - BehobenSiveillance Video 2022 R2
Update to V22.2 HotfixRev5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812608/ - BehobenSiveillance Video 2022 R3
Update to V22.3 HotfixRev2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109815353/ - BehobenSiveillance Video 2022 R3
Update to V22.3 HotfixRev2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109815353/ - BehobenSiveillance Video 2023 R1
Update to V23.1 HotfixRev1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109820659/ - BehobenSiveillance Video 2023 R1
Update to V23.1 HotfixRev1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109820659/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan