Vulnerability in Siveillance Control Allows Write Privileges for Read-Only Users

CVE-2023-45793

Summary

A significant access control vulnerability exists in Siemens Siveillance Control across versions starting from V2.8 and prior to V3.1.1. This flaw arises from improper validation of access groups assigned to users, potentially allowing a locally logged on user to elevate their permissions. Such users could gain unauthorized write access to objects, despite having only read permissions initially. This vulnerability presents serious implications for data integrity and security within affected systems.

References