CVE-2019-13918
First published: Fri Sep 13 2019(Updated: )
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). The web interface has no means to prevent password guessing attacks. The vulnerability could be exploited by an attacker with network access to the vulnerable software, requiring no privileges and no user interaction. The vulnerability could allow full access to the web interface. At the time of advisory publication no public exploitation of this security vulnerability was known.
Credit: productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens SINEMA Remote Connect Server | <2.0 | |
| Siemens SINEMA Remote Connect Server | =2.0 | |
| Siemens SINEMA Remote Connect Server | =2.0-hf1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2019-13918?
CVE-2019-13918 is a vulnerability in Siemens SINEMA Remote Connect Server (All versions < V2.0 SP1) that allows password guessing attacks.
How severe is CVE-2019-13918?
CVE-2019-13918 has a severity rating of 9.8 out of 10.
What software is affected by CVE-2019-13918?
SINEMA Remote Connect Server versions prior to V2.0 SP1 are affected by CVE-2019-13918.
How can the vulnerability in CVE-2019-13918 be exploited?
An attacker with network access to the vulnerable software can exploit CVE-2019-13918 without requiring privileges or user interaction.
Is there a fix available for CVE-2019-13918?
Siemens has released a security advisory with measures to mitigate the vulnerability. Please refer to the provided reference for more information.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/type
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/siemens
- canonical/siemens sinema remote connect server
- version/siemens sinema remote connect server/2.0
- version/siemens sinema remote connect server/2.0-hf1