CVE-2021-42021: Siemens Siveillance Video DLNA Server vulnerability
Siemens · Siveillance Video DLNA Server
Affected: Siemens Siveillance Video DLNA Server · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 78% of scored CVEs
Not scored yet. The CVE record carries no CVSS score.
DescriptionCVE.org
A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2), Siveillance Video DLNA Server (2019 R3), Siveillance Video DLNA Server (2020 R1), Siveillance Video DLNA Server (2020 R2), Siveillance Video DLNA Server (2020 R3), Siveillance Video DLNA Server (2021 R1). The affected application contains a path traversal vulnerability that could allow to read arbitrary files on the server that are outside the application’s web document directory. An unauthenticated remote attacker could exploit this issue to access sensitive information for subsequent attacks.
Affected products7
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Siemens · Siveillance Video DLNA Server2019 R1
- Siemens · Siveillance Video DLNA Server2019 R2
- Siemens · Siveillance Video DLNA Server2019 R3
- Siemens · Siveillance Video DLNA Server2020 R1
- Siemens · Siveillance Video DLNA Server2020 R2
- Siemens · Siveillance Video DLNA Server2020 R3
- Siemens · Siveillance Video DLNA Server2021 R1
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Siemens
- Published
- November 2021
CoverageNo articles yet
No CyberSIXT article names CVE-2021-42021 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.