CVE-2022-43400

State: Published
Severity: 9.8 Critical
Published: Oct 21, 2022
Updated: May 7, 2025
Reserved: Oct 18, 2022

Description

A vulnerability has been identified in Siveillance Video Mobile Server V2022 R2 (All versions < V22.2a (80)). The mobile server component of affected applications improperly handles the log in for Active Directory accounts that are part of Administrators group. This could allow an unauthenticated remote attacker to access the application without a valid account.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-1390 None

Affected Products

Product	Versions
Siveillance Video Mobile Server V2022 R2Siemens	All versions < V22.2a (80)Affected

References

https://cert-portal.siemens.com/productcert/pdf/ssa-640732.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.