CVE-2023-45793

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-12 · updated 2026-06-17
Weakness: CWE-863

Description

A vulnerability has been identified in Siveillance Control (All versions >= V2.8 < V3.1.1). The affected product does not properly check the list of access groups that are assigned to an individual user. This could enable a locally logged on user to gain write privileges for objects where they only have read privileges.

Affected products

Siemens Siveillance Control: from 2.8 before 3.1.1 — fixed in 3.1.1

How to fix

Upgrade to a fixed version: Siemens Siveillance Control 3.1.1. Check the vendor advisory for mitigations.

References

https://cert-portal.siemens.com/productcert/html/ssa-145196.html
https://cert-portal.siemens.com/productcert/html/ssa-145196.html

Get alerted when CVE-2023-45793 or the next vulnerability affects your stack