CVE-2023-30899

CriticalCVSS 9.9

Published: 09/05/2023(UTC)Updated: 23/10/2026(UTC)Translated: 24/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.11%

66th percentile - higher than 66% of all known CVEs

Summary

The Management Server component of affected Siveillance Video applications deserializes data without sufficient validation. An authenticated remote attacker could exploit this to execute code on the affected system.

Risk Assessment

An authenticated attacker could remotely execute arbitrary code in the context of the Management Server process, potentially leading to full system compromise and further lateral movement.

Recommendation

Update Siveillance Video to the fixed versions (HotfixRev) for the respective release branch. Restrict access to the Management Server to trusted networks and accounts.

Other vulnerabilities in Siveillance Video

CVE-2023-30898Critical
The Event Server component of affected Siveillance Video applications deserializes data without sufficient validations. This could allow an authenticated remote attacker to execute code on the affected system.

Original NVD description (English source)

A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versions < V20.3 HotfixRev12), Siveillance Video 2021 R1 (All versions < V21.1 HotfixRev12), Siveillance Video 2021 R2 (All versions < V21.2 HotfixRev8), Siveillance Video 2022 R1 (All versions < V22.1 HotfixRev7), Siveillance Video 2022 R2 (All versions < V22.2 HotfixRev5), Siveillance Video 2022 R3 (All versions < V22.3 HotfixRev2), Siveillance Video 2023 R1 (All versions < V23.1 HotfixRev1). The Management Server component of affected applications deserializes data without sufficient validations. This could allow an authenticated remote attacker to execute code on the affected system.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS