CVE-2023-30898

CriticalCVSS 9.9

Published: 09/05/2023(UTC)Updated: 24/10/2026(UTC)Translated: 24/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.11%

66th percentile - higher than 66% of all known CVEs

Summary

The Event Server component of affected Siveillance Video applications deserializes data without sufficient validations. This could allow an authenticated remote attacker to execute code on the affected system.

Risk Assessment

An authenticated attacker can execute arbitrary code on the system, potentially leading to server compromise and access to video data.

Recommendation

Update Siveillance Video to the fixed versions: V20.2 HotfixRev14, V20.3 HotfixRev12, V21.1 HotfixRev12, V21.2 HotfixRev8, V22.1 HotfixRev7, V22.2 HotfixRev5, V22.3 HotfixRev2, V23.1 HotfixRev1 or later.

Other vulnerabilities in Siveillance Video

CVE-2023-30899Critical
The Management Server component of affected Siveillance Video applications deserializes data without sufficient validation. An authenticated remote attacker could exploit this to execute code on the affected system.

Original NVD description (English source)

A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versions < V20.3 HotfixRev12), Siveillance Video 2021 R1 (All versions < V21.1 HotfixRev12), Siveillance Video 2021 R2 (All versions < V21.2 HotfixRev8), Siveillance Video 2022 R1 (All versions < V22.1 HotfixRev7), Siveillance Video 2022 R2 (All versions < V22.2 HotfixRev5), Siveillance Video 2022 R3 (All versions < V22.3 HotfixRev2), Siveillance Video 2023 R1 (All versions < V23.1 HotfixRev1). The Event Server component of affected applications deserializes data without sufficient validations. This could allow an authenticated remote attacker to execute code on the affected system.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS