CVE-2018-7891

The Milestone XProtect Video Management Software (Corporate, Expert, Professional+, Express+, Essential+) 2016 R1 (10.0.a) to 2018 R1 (12.1a) contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution.

Date published : 2018-04-30

http://www.securityfocus.com/bid/104120

https://cert-portal.siemens.com/productcert/pdf/ssa-457058.pdf