| Package | Affected versions | Patched versions |
|---|---|---|
| xprotect | ≥ 10.0.a, ≤ 12.1a | |
| siveillance vms | < 10.0a< 10.1a< 10.2b< 11.1a< 11.2a< 12.1a | 10.0a10.1a10.2b11.1a11.2a12.1a |
The Milestone XProtect Video Management Software (Corporate, Expert, Professional+, Express+, Essential+) 2016 R1 (10.0.a) to 2018 R1 (12.1a) contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free