Skip to content
OpenAdvisories
Medium SSA-625934 1 CVE

SSA-625934: Improper Access Control Vulnerability in the Webhooks Implementation of Siveillance Video Management Servers

Published Feb 10, 2026 · Updated Feb 10, 2026

Vendor: Siemens Product: Siveillance Video V2022 R3 Product: Siveillance Video V2023 R1 Product: Siveillance Video V2023 R2 Product: Siveillance Video V2023 R3 Product: Siveillance Video V2024 R1 Product: Siveillance Video V2025

Summary

The Webhooks implementation of Siveillance Video Management Servers contains a vulnerability that could allow an authenticated remote attacker with read-only privileges to achieve full access to Webhooks API.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

  • Medium 6.3
    CVE-2025-0836

    XProtect MIP API Missing Authorization

    Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to MIP Webhooks API.

    Milestone Systems XProtect VMS

Revision history

  1. #1

    Publication Date

References