CVE-2021-42021

A vulnerability has been identified in Siveillance Video DLNA Server 2019 R1, Siveillance Video DLNA Server 2019 R2, Siveillance Video DLNA Server 2019 R3, Siveillance Video DLNA Server 2020 R1, Siveillance Video DLNA Server 2020 R2, Siveillance Video DLNA Server 2020 R3, Siveillance Video DLNA...

CVE-2021-42021

Siemens Siveillance Video DLNA Server is affected across 2019 R1–2021 R1 builds. The flaw is a path traversal vulnerability (CWE-26) that could allow an unauthenticated, remote attacker to read arbitrary files outside the web document directory, exposing sensitive information. ICSA-21-315-13 and ...

Siveillance Video DLNA Server 路径遍历漏洞

Siemens Siveillance Video DLNA Server is a video DLNA server from Siemens, a German company, that is vulnerable to a path traversal vulnerability that could be exploited by remote attackers to access any file outside the application's Web document directory. Any file...

Siemens Siveillance Video DLNA Server

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Siveillance Video DLNA Server Vulnerability: Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow access to sensitive information on the DLNA...

Siemens Siveillance OIS Operating System Command Injection Vulnerability

Siemens Desigo CC is an open building management platform from Siemens, Germany.GMA Manager allows the functional combination of different safety and security systems, such as fire detection systems and video surveillance, on a common platform.Operation Scheduler is a tool that enables security...

CVE-2021-31891

A vulnerability has been identified in Desigo CC All versions with OIS Extension Module, GMA-Manager All versions with OIS running on Debian 9 or earlier, Operation Scheduler All versions with OIS running on Debian 9 or earlier, Siveillance Control All versions with OIS running on Debian 9 or...

Command injection

A vulnerability has been identified in Desigo CC All versions with OIS Extension Module, GMA-Manager All versions with OIS running on Debian 9 or earlier, Operation Scheduler All versions with OIS running on Debian 9 or earlier, Siveillance Control All versions with OIS running on Debian 9 or...

CVE-2021-31891

A vulnerability has been identified in Desigo CC All versions with OIS Extension Module, GMA-Manager All versions with OIS running on Debian 9 or earlier, Operation Scheduler All versions with OIS running on Debian 9 or earlier, Siveillance Control All versions with OIS running on Debian 9 or...

CVE-2021-31891

CVE-2021-31891 describes an OS command injection in Siemens Siveillance OIS. Affected products include Desigo CC (OIS Extension Module), GMA-Manager (OIS on Debian 9 or earlier), Operation Scheduler (OIS on Debian 9 or earlier), Siveillance Control (OIS on Debian 9 or earlier), and Siveillance Co...

Siemens Desigo CC 操作系统命令注入漏洞

Siemens Desigo CC is an open building management platform from Siemens, Germany.GMA Manager allows the functional combination of different safety and security systems, such as fire detection systems and video surveillance, on a common platform.Operation Scheduler is a tool that enables security...

Siemens Siveillance OIS

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Siveillance OIS Vulnerability: OS Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to execute code on...

CVE-2021-27392

A vulnerability has been identified in Siveillance Video Open Network Bridge 2020 R3, Siveillance Video Open Network Bridge 2020 R2, Siveillance Video Open Network Bridge 2020 R1, Siveillance Video Open Network Bridge 2019 R3, Siveillance Video Open Network Bridge 2019 R2, Siveillance Video Open...

CVE-2021-27392

A vulnerability has been identified in Siveillance Video Open Network Bridge 2020 R3, Siveillance Video Open Network Bridge 2020 R2, Siveillance Video Open Network Bridge 2020 R1, Siveillance Video Open Network Bridge 2019 R3, Siveillance Video Open Network Bridge 2019 R2, Siveillance Video Open...

Hardcoded credentials

A vulnerability has been identified in Siveillance Video Open Network Bridge 2020 R3, Siveillance Video Open Network Bridge 2020 R2, Siveillance Video Open Network Bridge 2020 R1, Siveillance Video Open Network Bridge 2019 R3, Siveillance Video Open Network Bridge 2019 R2, Siveillance Video Open...

CVE-2021-27392

Summary (CVE-2021-27392) : Siemens/Milestone Open Network Bridge (ONVIF) implementations across multiple versions (2018–2020 releases) store user credentials using a hard-coded cryptographic key. An authenticated remote attacker could retrieve and decrypt credentials stored on the ONVIF server vi...

CVE-2021-27392

A vulnerability has been identified in Siveillance Video Open Network Bridge 2020 R3, Siveillance Video Open Network Bridge 2020 R2, Siveillance Video Open Network Bridge 2020 R1, Siveillance Video Open Network Bridge 2019 R3, Siveillance Video Open Network Bridge 2019 R2, Siveillance Video Open...

Siemens Open Network Bridge 信任管理问题漏洞

Siveillance Video formerly known as Siveillance VMS is an IP video management software.The Siveillance Video product portfolio consists of four editions, Siveillance Video Core, Core Plus, Advanced, and Pro, which address the specific needs of small to medium-sized solutions to large, complex...

Siemens and Milestone Siveillance Video Open Network Bridge

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens and Milestone Equipment: Siveillance Video Open Network Bridge ONVIF Vulnerability: Use of Hard-coded Cryptographic Key 2. RISK EVALUATION Successful exploitation of this vulnerability could...

Siemens Siveillance Video Open Network Bridge (ONVIF) User Credentials Disclosure Vulnerability

Siveillance Video formerly known as Siveillance VMS is an IP video management software.The Siveillance Video product portfolio consists of four editions, Siveillance Video Core, Core Plus, Advanced, and Pro, which address the specific needs of small to medium-sized solutions to large, complex...

CVE-2020-15785

A vulnerability has been identified in Siveillance Video Client All versions. In environments where Windows NTLM authentication is enabled the affected client application transmits usernames to the server in cleartext. This could allow an attacker in a privileged network position to obtain valid...