CVE-2023-45793

A vulnerability has been identified in Siveillance Control (All versions >= V2.8 < V3.1.1). The affected product does not properly check the list of access groups that are assigned to an individual user. This could enable a locally logged on user to gain write privileges for objects where they only have read privileges.

• CWE-863

• https://cert-portal.siemens.com/productcert/html/ssa-145196.htmlVendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-145196.htmlVendor Advisory

Published

Mar 12, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-45777In checkKeyIntentParceledCorrectly of AccountManagerService.…7.8
• CVE-2023-45779In the APEX module framework of AOSP, there is a possible ma…7.8
• CVE-2023-4578When calling `JS::CheckRegExpSyntax` a Syntax Error could ha…6.5
• CVE-2023-45780In Print Service, there is a possible background activity la…7.3
• CVE-2023-45781In parse_gap_data of utils.cc, there is a possible out of bo…5.5
• CVE-2023-4579Search queries in the default search engine could appear to …3.1
• CVE-2023-45794A vulnerability has been identified in Mendix Applications u…8.1
• CVE-2023-45795A cross-site scripting vulnerability in the Builder Componen…7.8
• CVE-2023-45796A stored cross-site scripting vulnerability in the Runtime c…8.1
• CVE-2023-45797A Buffer overflow vulnerability in DreamSecurity MagicLine4N…9.8
• CVE-2023-45798In Yettiesoft VestCert versions 2.36 to 2.5.29, a vulnerabil…9.8
• CVE-2023-45799In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulne…9.8