Yüksek CVSS 8.8
CVE-2023-30898: Siveillance Video: güvenilmeyen verinin serileştirmeden çıkarılması
Açıklama (NVD)
A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versions < V20.3 HotfixRev12), Siveillance Video 2021 R1 (All versions < V21.1 HotfixRev12), Siveillance Video 2021 R2 (All versions < V21.2 HotfixRev8), Siveillance Video 2022 R1 (All versions < V22.1 HotfixRev7), Siveillance Video 2022 R2 (All versions < V22.2 HotfixRev5), Siveillance Video 2022 R3 (All versions < V22.3 HotfixRev2), Siveillance Video 2023 R1 (All versions < V23.1 HotfixRev1). The Event Server component of affected applications deserializes data without sufficient validations. This could allow an authenticated remote attacker to execute code on the affected system.
Özet bilgiler
- Ürün
- Siemens Siveillance Video
- CVSS v3.1
- 8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %1,11 (yüzdelik 66)
- CWE
- CWE-502
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| siemens-siveillance-video | 2020 | 2020 | — |
| siemens-siveillance-video | 2020 | 2020 | — |
| siemens-siveillance-video | 2021 | 2021 | — |
| siemens-siveillance-video | 2021 | 2021 | — |
| siemens-siveillance-video | 2022 | 2022 | — |
| siemens-siveillance-video | 2022 | 2022 | — |
| siemens-siveillance-video | 2022 | 2022 | — |
| siemens-siveillance-video | 2023 | 2023 | — |