VulnHub

Real-time Cybersecurity News

Critical

Siemens Siveillance Video

All CISA Advisories
CVEVulnerabilityPatchUpdateCritical

Overview

Siemens has identified a serious vulnerability in its Siveillance Video Management Servers that could allow attackers to execute arbitrary code remotely. This flaw, classified as CVE-2026-3014, affects several versions of the software, specifically Siveillance Video V2023 R3 versions prior to 23.3.27, V2024 R1 versions before 24.1.16, and V2025 versions below 25.1.15. Siemens urges users to update their systems to the latest versions to mitigate the risk. The vulnerability poses a significant threat to critical infrastructure sectors, including manufacturing and communications, making it crucial for organizations using these systems to act promptly. Users are also advised to enhance their network security measures to protect against potential exploitation.

Key Takeaways

  • Affected Systems: Siemens Siveillance Video V2023 R3 < V23.3.27, Siemens Siveillance Video V2024 R1 < V24.1.16, Siemens Siveillance Video V2025 < V25.1.15
  • Action Required: Update to Siveillance Video V2023 R3 HotfixRev27 or later, V2024 R1 HotfixRev16 or later, and V2025 HotfixRev15 or later.
  • Timeline: Newly disclosed

Original Article Summary

View CSAF Summary Siveillance Video Management Servers contains a vulnerability that could allow a Remote Code Execution attack. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens Siveillance Video are affected: Siveillance Video V2023 R3 vers:intdot/<23.3.27 (CVE-2026-3014) Siveillance Video V2024 R1 vers:intdot/<24.1.16 (CVE-2026-3014) Siveillance Video V2025 vers:intdot/<25.1.15 (CVE-2026-3014) CVSS Vendor Equipment Vulnerabilities v3 9.1 Siemens Siemens Siveillance Video Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Background Critical Infrastructure Sectors: Critical Manufacturing, Communications, Commercial Facilities Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities Expand All + CVE-2026-3014 Milestone has released a new version of XProtect® (and several cumulative patch updates) which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute arbitrary code in context of the Management Server Service. View CVE Details Affected Products Siemens Siveillance Video Vendor: Siemens Product Version: Siveillance Video V2023 R3 < V23.3.27, Siveillance Video V2024 R1 < V24.1.16, Siveillance Video V2025 < V25.1.15 Product Status: known_affected Remediations Vendor fix Update to V23.3 HotfixRev27 or later version https://support.industry.siemens.com/cs/ww/en/view/109827783/ Vendor fix Update to V24.1 HotfixRev16 or later version https://support.industry.siemens.com/cs/ww/en/view/109976123/ Vendor fix Update to V25.1 HotfixRev15 or later version https://support.industry.siemens.com/cs/ww/en/view/109988670/ Relevant CWE: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Metrics CVSS Version Base Score Base Severity Vector String 3.1 9.1 CRITICAL CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Acknowledgments Milestone PSIRT reported this vulnerability to Siemens General Recommendations As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment. Additional Resources For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories Terms of Use The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use. Legal Notice and Terms of Use This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy). Recommended Practices CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolate them from business networks. When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. Advisory Conversion Disclaimer This ICSA is a verbatim republication of Siemens SSA-825228 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory. Revision History Initial Release Date: 2026-08-11 Date Revision Summary 2026-08-11 1 Publication Date 2026-08-13 2 Initial CISA Republication of Siemens SSA-825228 advisory Legal Notice and Terms of Use

Impact

Siemens Siveillance Video V2023 R3 < V23.3.27, Siemens Siveillance Video V2024 R1 < V24.1.16, Siemens Siveillance Video V2025 < V25.1.15

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Newly disclosed

Remediation

Update to Siveillance Video V2023 R3 HotfixRev27 or later, V2024 R1 HotfixRev16 or later, and V2025 HotfixRev15 or later.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to CVE, Vulnerability, Patch, and 2 more.

Read Original Article

Related Coverage

Bipartisan Senate bill aims to prepare energy sector for Q-Day

CyberScoop

A new bipartisan Senate bill aims to enhance the energy sector's defenses against emerging cyber threats posed by quantum computing. The legislation directs the Federal Energy Regulatory Commission (FERC) to take into account the potential risks from quantum computers and the need for post-quantum cryptography in its reliability standards. This is significant because quantum computing has the potential to break traditional encryption methods, which could leave critical infrastructure vulnerable. By proactively addressing these threats, the bill seeks to ensure that the energy sector can maintain its security and reliability in the face of rapidly evolving technology. This move illustrates a growing recognition among lawmakers of the need to prepare for future cybersecurity challenges.

Aug 24, 2026

CMMC Phase 2 suspended: What defense contractors need to know

SCM feed for Latest

The Department of Defense has paused the implementation of CMMC Phase 2, which was intended to enhance cybersecurity standards among defense contractors. Despite this suspension, companies in the defense sector are still required to comply with existing cybersecurity requirements to protect sensitive information. This decision affects a wide range of contractors who must continue to meet the standards set by previous phases of the Cybersecurity Maturity Model Certification (CMMC). The pause raises questions about future compliance timelines and the overall effectiveness of cybersecurity measures within the defense supply chain. Contractors should stay informed and maintain their cybersecurity protocols to safeguard their systems against potential threats.

Aug 24, 2026

Cybercriminals Turn GTA VI Leaks Into Malware Bait

Security Affairs

Cybercriminals are exploiting the excitement surrounding the upcoming game, GTA VI, by distributing a fake 113GB build that contains malware. This malicious software is cleverly concealed within massive empty files, hiding a small but dangerous payload. Many eager fans are falling victim to this scam, with some even encouraging each other to download the file to verify the authenticity of the leaks. This situation raises significant concerns about user safety, as individuals risk infecting their own computers in pursuit of gaming news. It's a stark reminder that in the world of gaming, especially during hype periods, caution is essential to avoid malware traps.

Aug 24, 2026

NIST Warns of Unique Security Risks in Multi-Cloud Environments

Infosecurity Magazine

The National Institute of Standards and Technology (NIST) has identified 23 new security challenges that arise specifically in multi-cloud environments. This guidance is aimed at encouraging the cybersecurity community to address these unique risks, which can complicate data management and security protocols across different cloud platforms. As more organizations adopt multi-cloud strategies for flexibility and cost-effectiveness, understanding these challenges becomes critical to safeguarding sensitive information. NIST's call to action is particularly relevant for businesses that rely on multiple cloud services, as they face increased complexity in ensuring their data remains secure. The agency's emphasis on collaboration within the cyber community underscores the need for innovative solutions to these emerging issues.

Aug 24, 2026

ReliaQuest confirms failed data-theft attack after ShinyHunters breach

BleepingComputer

ReliaQuest, a cybersecurity company, has confirmed that an employee was targeted in a social engineering attack by hackers impersonating a member of their security team. This incident follows a previous breach involving the hacker group ShinyHunters, known for stealing and leaking data from various organizations. Although ReliaQuest has stated that no data was successfully stolen in this attempt, the incident raises concerns about the effectiveness of internal security protocols and employee training regarding social engineering tactics. It serves as a reminder of the ongoing risks that companies face from sophisticated phishing schemes and the need for vigilant security practices. The implications of such attacks can be significant, leading to potential data breaches and loss of trust among clients and partners.

Aug 24, 2026

⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More

The Hacker News

This week saw a rise in attacks leveraging AI to exploit Programmable Logic Controllers (PLCs), which are crucial in industrial automation. Researchers noted that trusted tools have been manipulated, making it easier for attackers to exploit existing vulnerabilities in these systems. Additionally, there were reported breaches involving GitLab, where sensitive data was compromised, and Stripe faced key leaks that could jeopardize user accounts. These incidents emphasize the need for companies to prioritize security measures and update their systems regularly to fend off these evolving threats. The implications are significant, as industries rely heavily on these technologies, and any exploitation can lead to serious operational disruptions.

Aug 24, 2026