CVE-2019-18340: Weak Encryption
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), Control Center Server (CCS) (All versions >= V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0). Both the SiVMS/SiNVR Video Server and the Control Center Server (CCS) store user and device passwords by applying weak cryptography.
A local attacker could exploit this vulnerability to extract the passwords from the user database and/or the device configuration files to conduct further attacks.
Other sources
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), Control Center Server (CCS) (All versions >= V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). Both the SiVMS/SiNVR Video Server and the Control Center Server (CCS) store user and device passwords by applying weak cryptography. A local attacker could exploit this vulnerability to extract the passwords from the user database and/or the device configuration files to conduct further attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-18340?
CVE-2019-18340 is rated as a high-severity vulnerability due to its potential impact on system integrity.
How do I fix CVE-2019-18340?
To mitigate CVE-2019-18340, upgrade to Siemens Sinvr 3 Central Control Server version V1.5.0 or later and Siemens Sinvr 3 Video Server version V5.0.0 or later.
What systems are affected by CVE-2019-18340?
CVE-2019-18340 affects all versions of Siemens Sinvr 3 Central Control Server prior to V1.5.0 and Siemens Sinvr 3 Video Server prior to V5.0.0.
Is there a workaround for CVE-2019-18340?
There are no known workarounds for CVE-2019-18340, and the recommended action is to update to the latest versions.
What are the implications of CVE-2019-18340?
CVE-2019-18340 may allow unauthorized access or manipulation of video management system functions, affecting overall security.