CVE-2019-13947: Medium severity siemens sinvr 3 central control server vulnerability
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The user configuration menu in the web interface of the Control Center Server (CCS) transfers user passwords in clear to the client (browser).
An attacker with administrative privileges for the web interface could be able to read (and not only reset) passwords of other CCS users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-13947?
CVE-2019-13947 is considered to be of medium severity due to the exposure of user passwords in clear text.
How do I fix CVE-2019-13947?
To fix CVE-2019-13947, upgrade Control Center Server (CCS) to version 1.5.0 or later.
What types of systems are affected by CVE-2019-13947?
CVE-2019-13947 affects Siemens Sinvr 3 Central Control Server and Sinvr 3 Video Server versions prior to 1.5.0.
What are the potential risks of CVE-2019-13947?
The potential risks of CVE-2019-13947 include unauthorized access to user accounts due to the transmission of passwords in clear text.
Can CVE-2019-13947 be exploited remotely?
Yes, CVE-2019-13947 may be exploited remotely if an attacker has administrative access to the web interface.