Read the docs
TI-2026-36885 Aliases CVE-2026-50093GHSA-2rpg-jwp8-r64m

Unrestricted file upload in Siemens Siveillance Control Pro V3.0

Priority MEDIUM 40CWE-434Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-434.

Summary

A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), Siveillance Control V3.0 (All versions < V3.0.22.2177), Siveillance Control V4.0 (All versions < V4.0.11.2177). A vulnerability in the OIS web module allows an attacker to upload arbitrary files to the server. Successful exploitation of this vulnerability could allow an attacker to gain root access on the host system, potentially leading to a full compromise of the affected OIS environment.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0032 25th percentileScored 2026-11-07
Fix Fixed Siveillance Control Pro V3.0 (Siemens): V3.0.12.2173Siveillance Control Pro V4.0 (Siemens): V4.0.9.2178+2 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSiveillance Control Pro V3.0before V3.0.12.2173V3.0.12.2173Patch availableCNA
SiemensSiveillance Control Pro V4.0before V4.0.9.2178V4.0.9.2178Patch availableCNA
SiemensSiveillance Control V3.0before V3.0.22.2177V3.0.22.2177Patch availableCNA
SiemensSiveillance Control V4.0before V4.0.11.2177V4.0.11.2177Patch availableCNA
  • Siveillance Control Pro V3.0 VendorSiemens Affected before V3.0.12.2173 Fixed in V3.0.12.2173 Patch available CNA
  • Siveillance Control Pro V4.0 VendorSiemens Affected before V4.0.9.2178 Fixed in V4.0.9.2178 Patch available CNA
  • Siveillance Control V3.0 VendorSiemens Affected before V3.0.22.2177 Fixed in V3.0.22.2177 Patch available CNA
  • Siveillance Control V4.0 VendorSiemens Affected before V4.0.11.2177 Fixed in V4.0.11.2177 Patch available CNA

Remediation

  • Fix · CNA Siveillance Control Pro V3.0 (Siemens) Fixed in V3.0.12.2173
  • Fix · CNA Siveillance Control Pro V4.0 (Siemens) Fixed in V4.0.9.2178
  • Fix · CNA Siveillance Control V3.0 (Siemens) Fixed in V3.0.22.2177
  • Fix · CNA Siveillance Control V4.0 (Siemens) Fixed in V4.0.11.2177

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-50093
  2. 2026-10-03 Alias added: GHSA-2rpg-jwp8-r64m

References

Other 1

  • TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
See all 2487 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences