A vulnerability has been identified in Siveillance Video Mobile Server V2022 R2 (All versions < V22.2a (80)). The mobile server component of affected applications improperly handles the log in for Active Directory accounts that are part of Administrators group. This could allow an unauthenticated remote attacker to access the application without a valid account.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-640732.pdf | Vendor Advisory |
Configurations
History
27 Jun 2023, 13:23
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-287 |
01 Mar 2023, 18:07
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-863 |
25 Jan 2023, 02:01
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-1390 |
24 Oct 2022, 15:46
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Siemens siveillance Video Mobile Server
Siemens |
|
| CWE | CWE-863 | |
| CPE | cpe:2.3:a:siemens:siveillance_video_mobile_server:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| References | (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-640732.pdf - Vendor Advisory |
21 Oct 2022, 14:33
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-10-21 14:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-43400
Mitre link : CVE-2022-43400
CVE.ORG link : CVE-2022-43400
JSON object : View
Products Affected
siemens
- siveillance_video_mobile_server