Siemens and Milestone Siveillance Video Open Network Bridge

🗓️ 13 Apr 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 69 Views

Siemens and Milestone Siveillance Video Open Network Bridge, hard-coded cryptographic key vulnerability, CVSS v3 9.9, user credential retrieval and decryption ris

Reporter	Title	Published	Views	Family All 8
CNNVD	Siemens Open Network Bridge 信任管理问题漏洞	13 Apr 202100:00	–	cnnvd
CNVD	Siemens Siveillance Video Open Network Bridge (ONVIF) User Credentials Disclosure Vulnerability	13 Apr 202100:00	–	cnvd
CVE	CVE-2021-27392	22 Apr 202120:42	–	cve
Cvelist	CVE-2021-27392	22 Apr 202120:42	–	cvelist
EUVD	EUVD-2021-14147	7 Oct 202500:30	–	euvd
NVD	CVE-2021-27392	22 Apr 202121:15	–	nvd
Prion	Hardcoded credentials	22 Apr 202121:15	–	prion
RedhatCVE	CVE-2021-27392	9 Jan 202611:28	–	redhatcve

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-853866.json
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-853866.txt
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-853866.pdf
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-103-15.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-103-15
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf

13 Apr 2021 00:00Current

9High risk

Vulners AI Score9

CVSS 24

CVSS 3.18.8

EPSS0.00239

siemens milestone siveillance video open network bridge onvif vulnerability cryptographic key cvss remote attacker user credentials authentication exploit hotfixes security advisory mitigations cisa vpn firewall