Summary
Siemens has released hotfixes for Siveillance Video DLNA Server, which fix a path traversal vulnerability that could allow an authenticated remote attacker to access sensitive information on the DLNA server.
Siemens has released updates for the DLNA server and recommends to apply the update on all installations where DLNA server used.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2)…
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-755517: Path Traversal Vulnerability in Siveillance Video DLNA Server - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-755517.txt
-
SSA-755517: Path Traversal Vulnerability in Siveillance Video DLNA Server - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-755517.pdf
-
ICS Advisory ICSA-21-315-13 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-315-13
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B