Description
Disclosure
of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera
credentials stored in the Recording Server under specific conditions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Milestone Systems | XProtect VMS | < 13.5a | 13.5a |
Advisories 3
- ICSA-25-016-03 Siemens Siveillance Video Camera CISA ICS & IT advisories · May 6, 2025
- SSA-404759 SSA-404759: Information Disclosure Vulnerability in Siveillance Video Camera Drivers Siemens ProductCERT · Jan 15, 2025
- NCSC-2025-0008 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Jan 14, 2025