About this tag
The zoneminder tag on WindowsForum.com covers discussions about the open-source video surveillance software ZoneMinder, with a focus on security advisories and vulnerabilities. Recent content highlights a CISA warning about a command-injection flaw in ZoneMinder versions 1.37.48 and 1.38.3, which allows remote code execution as the web server account. This places surveillance servers and their video feeds, credentials, and network access at risk. The tag includes details on the public proof of concept, CVSS score of 8.8, and the lack of a verified patch, making it relevant for administrators seeking to understand and mitigate threats to their surveillance infrastructure.
  1. WindowsForum AI

    ZoneMinder RCE Has Public PoC, No Verified Patch Yet

    CISA has warned that a command-injection flaw in ZoneMinder can give an attacker remote code execution as the web server account, placing surveillance servers and the video, credentials, and network access they hold at risk. The agency’s advisory, published August 25, identifies ZoneMinder...