EUVD-2026-72658
GHSA-2rpg-jwp8-r64m
Severity by source
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent vector with low-privilege auth required; root access on host represents a scope change from the web application to the OS, justifying S:C and full CIA impact.
Primary rating from Vendor (siemens).
CVSS VectorVendor: siemens
Lifecycle Timeline
7DescriptionCVE.org
A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), Siveillance Control V3.0 (All versions < V3.0.22.2177), Siveillance Control V4.0 (All versions < V4.0.11.2177). A vulnerability in the OIS web module allows an attacker to upload arbitrary files to the server. Successful exploitation of this vulnerability could allow an attacker to gain root access on the host system, potentially leading to a full compromise of the affected OIS environment.
AnalysisAI
Unrestricted file upload via the OIS web module in Siemens Siveillance Control and Siveillance Control Pro enables an adjacent, low-privileged attacker to upload and execute malicious server-side content, achieving root access on the OIS host. Both V3.0 and V4.0 product lines across the Control and Control Pro variants are affected, covering four separate CPE entries. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires three concurrent conditions: (1) network adjacency to the OIS host - the CVSS 4.0 AV:A metric confirms this is not directly reachable from the internet without traversing a network boundary; (2) a valid low-privilege account on the Siveillance OIS web module (PR:L), meaning fully unauthenticated exploitation is not possible; and (3) the OIS web module must be deployed and in a state that exposes the upload endpoint (AT:P). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.9 is driven by full CIA impact on both the vulnerable system (VC:H/VI:H/VA:H) and subsequent systems (SC:H/SI:H/SA:H), reflecting the scope change to root-level OS control. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to the vendor-released patched builds: Siveillance Control Pro V3.0 to V3.0.12.2173 or later, Siveillance Control Pro V4.0 to V4.0.9.2178 or later, Siveillance Control V3.0 to V3.0.22.2177 or later, and Siveillance Control V4.0 to V4.0.11.2177 or later, per Siemens advisory SSA-254516 at https://cert-portal.siemens.com/productcert/html/ssa-254516.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Conduct a complete inventory of all Siemens Siveillance Control and Control Pro deployments, identifying V3.0 and V4.0 instances across all product variants, and confirm patch status from Siemens advisory SSA-254516. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique File Upload
View allShare
External POC / Exploit Code
Leaving vuln.today