A vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3), Siveillance Video Open Network Bridge (2020 R2), Siv
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
A vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3), Siveillance Video Open Network Bridge (2020 R2), Siveillance Video Open Network Bridge (2020 R1), Siveillance Video Open Network Bridge (2019 R3), Siveillance Video Open Network Bridge (2019 R2), Siveillance Video Open Network Bridge (2019 R1), Siveillance Video Open Network Bridge (2018 R3), Siveillance Video Open Network Bridge (2018 R2). Affected Open Network Bridges store user credentials for the authentication between ONVIF clients and ONVIF server using a hard-coded key. The encrypted credentials can be retrieved via the MIP SDK. This could allow an authenticated remote attacker to retrieve and decrypt all credentials stored on the ONVIF server.
Timeline
- CVE published
- Record last updated
Affected versions
- Siemens Siveillance Video Open Network Bridge
2020 R3
- Siemens Siveillance Video Open Network Bridge
2020 R2
- Siemens Siveillance Video Open Network Bridge
2020 R1
- Siemens Siveillance Video Open Network Bridge
2019 R3
- Siemens Siveillance Video Open Network Bridge
2019 R2
- Siemens Siveillance Video Open Network Bridge
2019 R1
- Siemens Siveillance Video Open Network Bridge
2018 R3
- Siemens Siveillance Video Open Network Bridge
2018 R2