{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A vulnerability has been identified in the Open Interface Services (OIS) web module affecting Siveillance Control and Siveillance Control Pro (versions OIS 3.x.y and OIS 4.x.y) . This vulnerability allows an attacker to upload arbitrary files, which can lead to unauthorized root-level access on the OIS server.\n\nSiemens has released patches and updates for Siveillance OIS to apply to the products that incorporate the OIS service, and recommends to update to the latest versions.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-254516: Arbitrary File Upload in OIS Web Module - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-254516.html"
      },
      {
        "category": "self",
        "summary": "SSA-254516: Arbitrary File Upload in OIS Web Module - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-254516.json"
      }
    ],
    "title": "SSA-254516: Arbitrary File Upload in OIS Web Module",
    "tracking": {
      "current_release_date": "2026-09-08T00:00:00.000Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-254516",
      "initial_release_date": "2026-09-08T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-09-08T00:00:00.000Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        }
      ],
      "status": "interim",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c3.0.12.2173",
                "product": {
                  "name": "Siveillance Control Pro V3.0 \u003c V3.0.12.2173",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "Siveillance Control Pro V3.0"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c4.0.9.2178",
                "product": {
                  "name": "Siveillance Control Pro V4.0 \u003c V4.0.9.2178",
                  "product_id": "2"
                }
              }
            ],
            "category": "product_name",
            "name": "Siveillance Control Pro V4.0"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c3.0.22.2177",
                "product": {
                  "name": "Siveillance Control V3.0 \u003c V3.0.22.2177",
                  "product_id": "3"
                }
              }
            ],
            "category": "product_name",
            "name": "Siveillance Control V3.0"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c4.0.11.2177",
                "product": {
                  "name": "Siveillance Control V4.0 \u003c V4.0.11.2177",
                  "product_id": "4"
                }
              }
            ],
            "category": "product_name",
            "name": "Siveillance Control V4.0"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-50093",
      "cwe": {
        "id": "CWE-434",
        "name": "Unrestricted Upload of File with Dangerous Type"
      },
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in the OIS web module allows an attacker to upload arbitrary files to the server. Successful exploitation of this vulnerability could allow an attacker to gain root access on the host system, potentially leading to a full compromise of the affected OIS environment.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V3.0.12.2173 or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/110004860/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.0.22.2177 or later version",
          "product_ids": [
            "3"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/110004859/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V4.0.11.2177 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/110004859/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V4.0.9.2178 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/110004860/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.0,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "title": "CVE-2026-50093"
    }
  ]
}