CVE-2022-43400

Summary

A vulnerability has been identified in Siveillance Video Mobile Server V2022 R2 (All versions < V22.2a (80)). The mobile server component of affected applications improperly handles the log in for Active Directory accounts that are part of Administrators group. This could allow an unauthenticated remote attacker to access the application without a valid account.

Affected Software

VendorProductVersion RangeStatus
SiemensSiveillance Video Mobile Server V2022 R2All versions < V22.2a (80)affected

Weaknesses

  • CWE-1390: CWE-1390: None

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References