CVE-2018-7891

🗓️ 30 Apr 2018 15:00:00Reported by mitreType

Milestone XProtect Video Management Software (Corporate, Expert, Professional+) 2016 R1 to 2018 R1 contains .NET Remoting endpoints vulnerable to deserialization attacks

Reporter	Title	Published	Views	Family All 7
CNVD	Siemens Milestone XProtect Video Management Software Deserialization Elevation of Privilege Vulnerability	3 May 201800:00	–	cnvd
Cvelist	CVE-2018-7891	30 Apr 201815:00	–	cvelist
EUVD	EUVD-2018-19603	7 Oct 202500:30	–	euvd
ICS	ICSA-18-128-02 Siemens Siveillance VMS (Update A)	3 May 201800:00	–	ics
NVD	CVE-2018-7891	30 Apr 201815:29	–	nvd
Prion	Deserialization of untrusted data	30 Apr 201815:29	–	prion
Positive Technologies	PT-2025-50337	1 Jan 199900:00	–	ptsecurity

NVD

Node

milestonesys xprotectRange10.0.a–12.1acorporate

milestonesys xprotectRange10.0.a–12.1aessential+

milestonesys xprotectRange10.0.a–12.1aexpert

milestonesys xprotectRange10.0.a–12.1aexpress+

milestonesys xprotectRange10.0.a–12.1aprofessional+

Node

siemens siveillance_vmsRange<10.0a

Node

siemens siveillance_vmsRange<10.1a

Node

siemens siveillance_vmsRange<10.2b

Node

siemens siveillance_vmsRange<11.1a

Node

siemens siveillance_vmsRange<11.2a

Node

siemens siveillance_vmsRange<12.1a

Source	Link
securityfocus	www.securityfocus.com/bid/104120
supportcommunity	www.supportcommunity.milestonesys.com/s/article/XProtect-VMS-NET-security-vulnerability-hotfixes-for-2016-R1-2018-R1
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-457058.pdf

21 Nov 2024 04:12Current

8.4High risk

Vulners AI Score8.4

CVSS 26.8

CVSS 38.1

EPSS0.02682

CWE-502