Description
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0 < V5.0.2), SiNVR/SiVMS Video Server (All versions >= V5.0.2). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server
applies weak cryptography when exposing device (camera) passwords.
This could allow an unauthenticated remote attacker to read and decrypt
the passwords and conduct further attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SiNVR/SiVMS Video Server | All versions < V5.0.0, All versions >= V5.0.0 < V5.0.2, All versions >= V5.0.2 | — |
Advisories 1
- SSA-844761 SSA-844761: Multiple Vulnerabilities in SiNVR/SiVMS Video Server Siemens ProductCERT · Jan 9, 2024