A vulnerability has been identified in Siveillance Control (All versions >= V2.8 < V3.1.1). The affected product does not properly check the list of access groups that are assigned to an individual user. This could enable a locally logged on user to gain write privileges for objects where they only have read privileges.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-145196.html | Vendor Advisory |
| https://cert-portal.siemens.com/productcert/html/ssa-145196.html | Vendor Advisory |
Configurations
History
10 Oct 2025, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:siemens:siveillance_control:*:*:*:*:*:*:*:* | |
| First Time |
Siemens
Siemens siveillance Control |
|
| References | () https://cert-portal.siemens.com/productcert/html/ssa-145196.html - Vendor Advisory |
21 Nov 2024, 08:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert-portal.siemens.com/productcert/html/ssa-145196.html - |
12 Mar 2024, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-12 11:15
Updated : 2025-10-10 15:18
NVD link : CVE-2023-45793
Mitre link : CVE-2023-45793
CVE.ORG link : CVE-2023-45793
JSON object : View
Products Affected
siemens
- siveillance_control
CWE
CWE-863
Incorrect Authorization