CVE-2022-43400
Critical
Description
A vulnerability has been identified in Siveillance Video Mobile Server V2022 R2 (All versions < V22.2a (80)). The mobile server component of affected applications improperly handles the log in for Active Directory accounts that are part of Administrators group. This could allow an unauthenticated remote attacker to access the application without a valid account.
SeverityCritical
CVSS9.8
Exploit probability—
ProductSiemens Siveillance Video Mobile Server
PublishedOct 21, 2022
First seenOct 21, 2022
Weakness typeCWE-1390CWE-1390
How to fix
Update
- siemens siveillance_video_mobile_server22.2a\(80\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens siveillance_video_mobile_server | v < 22.2a\(80\) | 22.2a\(80\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.