CVE:CVE-2018-7891
CNNVD:CNNVD-201805-041
Milestone XProtect Video Management Software是一套用于管理监控视频等内容的视频管理软件。
多款Milestone XProtect Video Management Software中的.NET远程端点存在安全漏洞。远程攻击者可利用该漏洞执行代码。以下产品和版本受到影响：Milestone XProtect Video Management Software Corporate 2016 R1 (10.0.a)版本至2018 R1 (12.1a)版本；Milestone XProtect Video Management Software Expert 2016 R1 (10.0.a)版本至2018 R1 (12.1a)版本；Milestone XProtect Video Management Software Professional+ 2016 R1 (10.0.a)版本至2018 R1 (12.1a)版本；Milestone XProtect Video Management Software Express+ 2016 R1 (10.0.a)版本至2018 R1 (12.1a)版本；Milestone XProtect Video Management Software Essential+ 2016 R1 (10.0.a)版本至2018 R1 (12.1a)版本。
solution:Upgrade milestonesys xprotect to a higher version than 12.1a,and avoid the version [10.0.a,12.1a]; Upgrade siemens siveillance_vms to a higher version than 10.0a,10.1a,10.2b,11.1a,11.2a,12.1a,and avoid the version (,10.0a),(,10.1a),(,10.2b),(,11.1a),(,11.2a),(,12.1a)