VULNERABILITY INTELLIGENCE

CVE-2022-43400

CVSS score9.8 CRITICAL
EPSS probability1.07%
CISA KEVNot currently listed
Published2022-10-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability has been identified in Siveillance Video Mobile Server V2022 R2 (All versions < V22.2a (80)). The mobile server component of affected applications improperly handles the log in for Active Directory accounts that are part of Administrators group. This could allow an unauthenticated remote attacker to access the application without a valid account.

Weakness classification

  • productcert@siemens.com: CWE-1390
  • nvd@nist.gov: CWE-287

Primary references