Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-70613
HistoryOct 21, 2022 - 12:00 a.m.

Siemens Siveillance Video Mobile Server Authentication Bypass Vulnerability

2022-10-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
siemens
siveillance video
mobile server
authentication bypass
vulnerability
ip video management software
active directory
administrators group
unauthenticated remote attacker
exploit

0.003 Low

EPSS

Percentile

71.9%

Siveillance Video (formerly known as SiveillanceVMS) is a functional IP video management software for deployments ranging from small and simple to large scale and highly secure.An authentication bypass vulnerability exists in Siemens Siveillance Video Mobile Server, which is caused by the affected application The mobile server component of the affected application does not properly handle logins for Active Directory accounts belonging to the Administrators group. An unauthenticated remote attacker could exploit the vulnerability to access the application without a valid account.

0.003 Low

EPSS

Percentile

71.9%

Related for CNVD-2022-70613