CVE-2019-13918: Critical severity siemens sinema remote connect vulnerability
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). The web interface has no means to prevent password guessing attacks. The vulnerability could be exploited by an attacker with network access to the vulnerable software, requiring no privileges and no user interaction. The vulnerability could allow full access to the web interface. At the time of advisory publication no public exploitation of this security vulnerability was known.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-13918?
CVE-2019-13918 is a vulnerability in Siemens SINEMA Remote Connect Server (All versions < V2.0 SP1) that allows password guessing attacks.
How severe is CVE-2019-13918?
CVE-2019-13918 has a severity rating of 9.8 out of 10.
What software is affected by CVE-2019-13918?
SINEMA Remote Connect Server versions prior to V2.0 SP1 are affected by CVE-2019-13918.
How can the vulnerability in CVE-2019-13918 be exploited?
An attacker with network access to the vulnerable software can exploit CVE-2019-13918 without requiring privileges or user interaction.
Is there a fix available for CVE-2019-13918?
Siemens has released a security advisory with measures to mitigate the vulnerability. Please refer to the provided reference for more information.