CVE-2019-18337: Critical severity siemens sinvr 3 central control server vulnerability
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains an authentication bypass vulnerability in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp.
A remote attacker with network access to the CCS server could exploit this vulnerability to read the CCS users database, including the passwords of all users in obfuscated cleartext.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-18337?
CVE-2019-18337 is considered a critical vulnerability due to the potential for an authentication bypass.
How do I fix CVE-2019-18337?
To mitigate CVE-2019-18337, upgrade to Control Center Server (CCS) version 1.5.0 or newer.
What weaknesses does CVE-2019-18337 exploit?
CVE-2019-18337 exploits an authentication bypass in the XML-based communication protocol used by Control Center Server.
Which Siemens products are affected by CVE-2019-18337?
CVE-2019-18337 affects all versions of Siemens Sinvr 3 Central Control Server and Video Server prior to version 1.5.0.
How can I determine if my system is vulnerable to CVE-2019-18337?
You can determine vulnerability to CVE-2019-18337 by checking if you are running a version of Control Center Server prior to 1.5.0.