Description
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default ports 21/tcp and 5411/tcp) of the SiVMS/SiNVR Video
Server contain a path traversal vulnerability
that could allow an authenticated remote attacker to access and download
arbitrary files from the server, if the FTP services are enabled.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SiNVR/SiVMS Video Server | All versions < V5.0.0 | — |
Advisories 1
- SSA-844761 SSA-844761: Multiple Vulnerabilities in SiNVR/SiVMS Video Server Siemens ProductCERT · Jan 9, 2024