CISA 2026-08-13

Siemens Siveillance Video

CVE-2026-3014

Machine-generated analysis · WAYSCloud LLM

Siemens Siveillance Video Management Servers are affected by an OS Command Injection vulnerability. The advisory states that this could allow a Remote Code Execution attack.

Context

Siemens Siveillance Video Management Servers are affected versions V2023 R3 < 23.3.27, V2024 R1 < 24.1.16, and V2025 < 25.1.15. The advisory details that the vulnerability (CVE-2026-3014) allows users with edit permissions to execute arbitrary code in the context of the Management Server Service. Siemens recommends updating to the latest versions to remediate the issue.

Operator considerations

Patch to V23.3 HotfixRev27 or later version. Patch to V24.1 HotfixRev16 or later version. Patch to V25.1 HotfixRev15 or later version.

From Cybersecurity and Infrastructure Security Agency ↗

Siveillance Video Management Servers contains a vulnerability that could allow a Remote Code Execution attack. Siemens has released new versions for the affected products and recommends to update to the latest versions.

The following versions of Siemens Siveillance Video are affected:

Siveillance Video V2023 R3 vers:intdot/

Read the full advisory on CISA →