Skip to content
Sign in
Artwork for Cybersecurity Under Pressure. Real Attacks, Real Lessons
Cybersecurity Under Pressure. Real Attacks, Real Lessons · September 4 · 1 hr 20 min

Siemens Siveillance: When Edit Access Enables Code Execution

Edit permissions inside an application can become code execution at the service layer. Explore Siemens Siveillance Video through Management Server API access and privilege boundaries. The episode examines why application roles must be assessed against the authority of the underlying service. https://cybersecurityunderpressure.com https://t.me/cybersecurityunderpressure Related CUP episodes: PowerLogic T300 Security: When SSH Access Crosses the Trust Boundary Weidmüller Router Security: When Segmentation Becomes an Attack Path Johnson Controls Airwall: The Risk Behind a Hardcoded Key PLCnext Vulnerabilities: Assessing the Real OT Attack Path Windchill Security: Restoring Trust in Engineering Data

0:00-1:20:08
Play in

transcript

No transcript — this publisher did not publish one.

show notes

Edit permissions inside an application can become code execution at the service layer. Explore Siemens Siveillance Video through Management Server API access and privilege boundaries. The episode examines why application roles must be assessed against the authority of the underlying service.

https://cybersecurityunderpressure.com

https://t.me/cybersecurityunderpressure

Related CUP episodes:

  1. PowerLogic T300 Security: When SSH Access Crosses the Trust Boundary
  2. Weidmüller Router Security: When Segmentation Becomes an Attack Path
  3. Johnson Controls Airwall: The Risk Behind a Hardcoded Key
  4. PLCnext Vulnerabilities: Assessing the Real OT Attack Path
  5. Windchill Security: Restoring Trust in Engineering Data
links5

more episodes

All episodes