High SSA-472448 1 CVE

SSA-472448: Security Bypass Vulnerability in the SQL Client-Server Communication in Siveillance Video

Published Nov 13, 2024 · Updated Nov 13, 2024

Vendor: Siemens Product: Siveillance Video 2022 R1 Product: Siveillance Video 2022 R2 Product: Siveillance Video 2022 R3 Product: Siveillance Video 2023 R1 Product: Siveillance Video 2023 R2 Product: Siveillance Video 2023 R3

Summary

Siveillance Video is affected by a security bypass vulnerability in the Microsoft .NET implementation of SQL Client as described in CVE-2024-0056.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

High 8.7

CVE-2024-0056

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

Microsoft Microsoft SQL Server 2022 (GDR) Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Alpine NuGet

Jan 9, 2024

Revision history

2024-11-13 #1
Publication Date

References

SSA-472448: Security Bypass Vulnerability in the SQL Client-Server Communication in Siveillance Video - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-472448.html