CVE-2019-6580

CVE-2019-6580 affects Siemens Siveillance VMS: 2017 R2 (< v11.2a), 2018 R1 (< v12.1a), 2018 R2 (< v12.2a), 2018 R3 (< v12.3a), and 2019 R1 (

CVE-2019-6581

A vulnerability has been identified in Siveillance VMS 2017 R2 All versions V11.2a, Siveillance VMS 2018 R1 All versions V12.1a, Siveillance VMS 2018 R2 All versions V12.2a, Siveillance VMS 2018 R3 All versions V12.3a, Siveillance VMS 2019 R1 All versions V13.1a. An attacker with network access t...

Siemens Siveillance VMS Authorization Bypass Vulnerability

Siemens Siveillance VMS is a set of surveillance video management software from Siemens Germany. A security vulnerability exists in Siemens Siveillance VMS. An attacker could exploit the vulnerability to change user-defined event attributes...

CVE-2019-6580: Missing Authorization

A vulnerability has been identified in Siveillance VMS 2017 R2 All versions V11.2a, Siveillance VMS 2018 R1 All versions V12.1a, Siveillance VMS 2018 R2 All versions V12.2a, Siveillance VMS 2018 R3 All versions V12.3a, Siveillance VMS 2019 R1 All versions V13.1a. An attacker with network access t...

CVE-2019-6581: Improper Authorization

A vulnerability has been identified in Siveillance VMS 2017 R2 All versions V11.2a, Siveillance VMS 2018 R1 All versions V12.1a, Siveillance VMS 2018 R2 All versions V12.2a, Siveillance VMS 2018 R3 All versions V12.3a, Siveillance VMS 2019 R1 All versions V13.1a. An attacker with network access t...

PT-2019-18169

Name of the Vulnerable Software and Affected Versions Siveillance VMS 2017 R2 versions prior to V11.2a Siveillance VMS 2018 R1 versions prior to V12.1a Siveillance VMS 2018 R2 versions prior to V12.2a Siveillance VMS 2018 R3 versions prior to V12.3a Siveillance VMS 2019 R1 versions prior to V13.1...

PT-2019-18168

Name of the Vulnerable Software and Affected Versions Siveillance VMS 2017 R2 versions prior to V11.2a Siveillance VMS 2018 R1 versions prior to V12.1a Siveillance VMS 2018 R2 versions prior to V12.2a Siveillance VMS 2018 R3 versions prior to V12.3a Siveillance VMS 2019 R1 versions prior to V13.1...

Siemens Siveillance VMS Security Bypass Vulnerability

Siemens Siveillance VMS is a set of surveillance video management software from Siemens Germany. A security vulnerability exists in Siemens Siveillance VMS. An attacker could exploit the vulnerability to change user roles...

CVE-2019-6582: Improper Authorization

A vulnerability has been identified in Siveillance VMS 2017 R2 All versions V11.2a, Siveillance VMS 2018 R1 All versions V12.1a, Siveillance VMS 2018 R2 All versions V12.2a, Siveillance VMS 2018 R3 All versions V12.3a, Siveillance VMS 2019 R1 All versions V13.1a. An attacker with network access t...

Siemens Siveillance VMS Authorization Issues Vulnerability

Siemens Siveillance VMS is a set of surveillance video management software from Siemens Germany. An authorization issue vulnerability exists in Siemens Siveillance VMS. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a networked system or...

PT-2019-2666

Name of the Vulnerable Software and Affected Versions Siveillance VMS versions prior to V11.2a Siveillance VMS versions prior to V12.1a Siveillance VMS versions prior to V12.2a Siveillance VMS versions prior to V12.3a Siveillance VMS versions prior to V13.1a Description The issue is related to...

ICSA-19-162-01 Siemens Siveillance VMS

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: Siveillance VMS Vulnerabilities: Improper Authorization, Incorrect User Management, Missing Authorization 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of serviceDoS attacks. This is because improper validation in the bnx2x network card driver. An attacker could send a packet with a gsosize larger than 9700 bytes because of that Untrusted guest VMs could exploit this vulnerability in the host machine, causing...

Command injection

Dell EMC RecoverPoint versions prior to 5.1.3 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an OS command injection vulnerability in the installation feature of Boxmgmt CLI. A malicious boxmgmt user may potentially be able to execute arbitrary commands as root...

CVE-2019-3727

Dell EMC RecoverPoint and RecoverPoint for VMs prior to 5.1.3 and 5.2.0.2, respectively, contain an OS command injection vulnerability in the Boxmgmt CLI installation feature. A local boxmgmt user can potentially execute arbitrary commands as root due to this input handling flaw. The issue is doc...

PT-2019-16671

Name of the Vulnerable Software and Affected Versions Dell EMC RecoverPoint versions prior to 5.1.3 Dell EMC RecoverPoint for VMs versions prior to 5.2.0.2 Description The issue concerns an OS command injection vulnerability in the installation feature of Boxmgmt CLI. A malicious boxmgmt user may...

Citrix Hypervisor Security Update

Description of Problem A number of security issues have been identified in certain CPU hardware that may allow unprivileged code running on a CPU core to infer the value of memory data belonging to other processes, virtual machines or the hypervisor that are, or have recently been, running on the...

Product update: Virtuozzo Infrastructure Platform 2.5 Update 5 (2.5.0-1639)

This update provides a new feature as well as stability and usability fixes. Vulnerability id: VSTOR-20558 The same data path ID was assigned to VLAN interfaces in OVS bridges. Vulnerability id: VSTOR-20913 Unable to update storage license. Vulnerability id: VSTOR-21089 Under certain circumstance...

Beauty Out of Chaos: Elevating Cybersecurity to an Art Form – Part 1

How many of you can remember what it was like managing IT security 10 years ago? How about two decades? The truth is that the landscape was so utterly different back then that any comparisons with today are a little unfair. Yet they’re useful in one key regard: to teach us just how complex and...

[SECURITY] Fedora 29 Update: docker-1.13.1-65.git1185cfd.fc29

Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container...