SSA-254516: Arbitrary File Upload in OIS Web Module
A vulnerability has been identified in the Open Interface Services (OIS) web module affecting Siveillance Control and Siveillance Control Pro (versions OIS 3.x.y and OIS 4.x.y) . This vulnerability allows an attacker to upload arbitrary files, which can lead to unauthorized root-level access on the OIS server. Siemens has released patches and updates for Siveillance OIS to apply to the products that incorporate the OIS service, and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-50093DE | critical9.0 | — | ||
A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), Siveillance Control V3… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- BehobenSiveillance Control Pro V3.0
Update to V3.0.12.2173 or later version
https://support.industry.siemens.com/cs/ww/en/view/110004860/ - BehobenSiveillance Control Pro V4.0
Update to V4.0.9.2178 or later version
https://support.industry.siemens.com/cs/ww/en/view/110004860/ - BehobenSiveillance Control V3.0
Update to V3.0.22.2177 or later version
https://support.industry.siemens.com/cs/ww/en/view/110004859/ - BehobenSiveillance Control V4.0
Update to V4.0.11.2177 or later version
https://support.industry.siemens.com/cs/ww/en/view/110004859/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan