Siemens Siveillance Control File Upload Flaw Grants Root-Level Server Access

A vulnerability in the Open Interface Services (OIS) web module used by Siveillance Control and Siveillance Control Pro (OIS versions 3.x and 4.x) allows an attacker to upload arbitrary files.

Successful exploitation can lead to unauthorized root-level access on the OIS server. Siemens has released patches and updates for the affected products and recommends updating immediately.