Longwatch RCE Vulnerability Lets Attackers Execute Remote Code With Elevated Privileges

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in Longwatch Surveillance System Exposed A critical remote code execution vulnerability has been identified in Industrial Video & Control's Longwatch surveillance system, allowing unauthenticated attackers to execute arbitrary code with SYSTEM-level privileges. The Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory regarding this flaw, which poses significant risks to organizations utilizing the affected platform. 3 sources 52