CVE-2018-7891

The Milestone XProtect Video Management Software (Corporate, Expert, Professional+, Express+, Essential+) 2016 R1 (10.0.a) to 2018 R1 (12.1a) contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution.

Score

CVSS 3.0 8.1 High

Status

Modified - cve@mitre.org

Published

2018-04-30

Last modified

2024-08-05

Weaknesses

CWE-502

Affected products

• Xprotect (Milestonesys)
• Siveillance Vms (Siemens)

References

• http://www.securityfocus.com/bid/104120
• https://cert-portal.siemens.com/productcert/pdf/ssa-457058.pdf
• https://supportcommunity.milestonesys.com/s/article/XProtect-VMS-NET-security-vulnerability-hotfixes-for-2016-R1-2018-R…