Summary
The installer of Siveillance Video V2024 R1 resets the system configuration password when updating from older versions of Siveillance Video. This could inadvertently remove the password protection from system configuration files, also affecting backup data sets that were created after the update to V2024 R1.
Siemens recommends to change the system configuration password settings for systems that were updated from any older version to V2024 R1.
Vulnerabilities 1
-
Medium 5.5
System configuration password reset
Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system configuration password after the upgrading from older versions using specific installers. The system configuration password is an additional, optional…
Revision history
-
#1
Publication Date
References
-
SSA-552330: System Configuration Password Reset in Siveillance Video V2024 R1 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-552330.html