Security Bypass Vulnerability in the SQL Client-Server Communication in Siveillance Video

An attacker with network access to the SQL connection between Siveillance Video and its database could bypass encryption, intercept credentials, and gain unauthorized access to video storage and system configuration data, potentially leading to unauthorized access, modification, or deletion of recorded video evidence and system settings.

Water authorities and municipal utilities using Siveillance Video for physical security camera monitoring and forensic evidence storage. The vulnerability affects the database communication layer, so any installation using SQL Server as the backend database is at risk of credential compromise and unauthorized access to stored video and system configuration.

An attacker positioned on the network between the Siveillance Video application server and the SQL database server exploits the .NET SQL Client vulnerability to disable encrypted communication. The attacker then intercepts the connection to capture authentication credentials and database traffic, gaining access to the underlying SQL database without authentication or with captured credentials.