A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), Siveillance VMS 2018 R2 (All versions < V12.2a), Siveillance VMS 2018 R3 (All versions < V12.3a), Siveillance VMS 2019 R1 (All versions < V13.1a). An attacker with network access to port 80/TCP could change device properties without authorization. No user interaction is required to exploit this security vulnerability. Successful exploitation compromises confidentiality, integrity and availability of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Siveillance VMS 2017 R2
Vendor
Siemens AG
Product
Siveillance VMS 2017 R2
Platforms
Unknown
Default status
Unknown
Siveillance VMS 2017 R2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V11.2a
affected
Unavailable
Unavailable
Unavailable
None listed
Siveillance VMS 2018 R1
Vendor
Siemens AG
Product
Siveillance VMS 2018 R1
Platforms
Unknown
Default status
Unknown
Siveillance VMS 2018 R1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V12.1a
affected
Unavailable
Unavailable
Unavailable
None listed
Siveillance VMS 2018 R2
Vendor
Siemens AG
Product
Siveillance VMS 2018 R2
Platforms
Unknown
Default status
Unknown
Siveillance VMS 2018 R2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V12.2a
affected
Unavailable
Unavailable
Unavailable
None listed
Siveillance VMS 2018 R3
Vendor
Siemens AG
Product
Siveillance VMS 2018 R3
Platforms
Unknown
Default status
Unknown
Siveillance VMS 2018 R3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V12.3a
affected
Unavailable
Unavailable
Unavailable
None listed
Siveillance VMS 2019 R1
Vendor
Siemens AG
Product
Siveillance VMS 2019 R1
Platforms
Unknown
Default status
Unknown
Siveillance VMS 2019 R1 · Scoped product and version facts