[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-siemens-patches-critical-flaw-in-video-surveillance-servers":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},4888,"siemens-patches-critical-flaw-in-video-surveillance-servers","Siemens Patches Critical Flaw in Video Surveillance Servers","A command injection bug in Siemens Siveillance Video lets an edit-privileged user run arbitrary code on the management server.","Siemens' video surveillance platform can be hijacked by anyone who already has edit access to it.\n\nCISA republished a Siemens advisory on August 13, 2026, disclosing CVE-2026-3014, an OS command injection flaw in the Management Server API of Siveillance Video. It affects V2023 R3 before 23.3.27, V2024 R1 before 24.1.16, and V2025 before 25.1.15. The bug lets a user with edit permissions on the Management Server execute arbitrary code in the context of the Management Server service. Siemens has shipped hotfixes for all three branches and is urging customers to update immediately.\n\nThe CVSS score is 9.1, just shy of maximum, because the attacker needs prior edit-level access rather than none at all. But no additional user interaction is required, so stolen or brute-forced credentials translate directly into full remote code execution. That matters because Siveillance Video runs across critical manufacturing, communications, and commercial facilities worldwide, exactly the sectors where a compromised camera network can become a stepping stone into the rest of the operation.\n\nSiveillance Video is Siemens' branded version of Milestone's XProtect platform, and it was Milestone's own security team that found and reported the flaw to Siemens. A critical remote-code-execution bug in software meant to watch over a facility is the kind of irony ICS defenders run into often.","[\"siemens\",\"vulnerability\",\"ics-security\",\"cisa\"]","2026-08-13T12:00:00.000Z","2026-08-14T05:37:34.021Z","2026-08-14T05:37:46.343Z","published",null,[],"security",[26,27,28,29],"siemens","vulnerability","ics-security","cisa",[31],{"name":32,"url":33},"CISA Advisories","https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-advisories\u002Ficsa-26-225-09",0,{"sections":36},[37,42,45,50,55,60,65,70,75,80,85,90,95,100],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",3293,"2026-08-20T04:00:00.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":41},"Security",435,{"name":46,"slug":47,"count":48,"latest_published_at":49},"Policy","policy",210,"2026-08-19T09:32:27.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Hardware","hardware",140,"2026-08-19T18:25:42.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Consumer Tech","consumer-tech",95,"2026-08-18T16:05:00.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Science","science",90,"2026-08-19T18:41:02.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Startups","startups",47,"2026-08-19T19:13:46.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"General","general",33,"2026-08-18T22:18:13.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":101,"slug":102,"count":103,"latest_published_at":104},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]