CVE-2023-30898 — Siemens / Siveillance Video 2020 R2

Description (CNA)

A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versions < V20.3 HotfixRev12), Siveillance Video 2021 R1 (All versions < V21.1 HotfixRev12), Siveillance Video 2021 R2 (All versions < V21.2 HotfixRev8), Siveillance Video 2022 R1 (All versions < V22.1 HotfixRev7), Siveillance Video 2022 R2 (All versions < V22.2 HotfixRev5), Siveillance Video 2022 R3 (All versions < V22.3 HotfixRev2), Siveillance Video 2023 R1 (All versions < V23.1 HotfixRev1). The Event Server component of affected applications deserializes data without sufficient validations. This could allow an authenticated remote attacker to execute code on the affected system.

Affected (CNA)

Vendor / product	Versions
Siemens / Siveillance Video 2020 R2	affected All versions < V20.2 HotfixRev14
Siemens / Siveillance Video 2020 R3	affected All versions < V20.3 HotfixRev12
Siemens / Siveillance Video 2021 R1	affected All versions < V21.1 HotfixRev12
Siemens / Siveillance Video 2021 R2	affected All versions < V21.2 HotfixRev8
Siemens / Siveillance Video 2022 R1	affected All versions < V22.1 HotfixRev7
Siemens / Siveillance Video 2022 R2	affected All versions < V22.2 HotfixRev5
Siemens / Siveillance Video 2022 R3	affected All versions < V22.3 HotfixRev2
Siemens / Siveillance Video 2023 R1	affected All versions < V23.1 HotfixRev1

CWE

CWE-502

References

https://cert-portal.siemens.com/productcert/pdf/ssa-789345.pdf

ADP enrichment

CVE

No English description supplied.

https://cert-portal.siemens.com/productcert/pdf/ssa-789345.pdf

CISA-ADP

No English description supplied.

No references supplied.