CVE-2019-18341: Medium severity siemens sinvr 3 central control server vulnerability
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server (CCS) contains an authentication bypass vulnerability.
A remote attacker with network access to the CCS server could exploit this vulnerability to read data from the EDIR directory (for example, the list of all configured stations).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-18341?
CVE-2019-18341 is rated as a critical vulnerability due to its authentication bypass nature, allowing remote attackers to gain unauthorized access.
How do I fix CVE-2019-18341?
To address CVE-2019-18341, upgrade the Control Center Server (CCS) to version 1.5.0 or later.
What systems are affected by CVE-2019-18341?
CVE-2019-18341 affects all versions of the Control Center Server (CCS) prior to V1.5.0, specifically Siemens Sinvr 3 Central Control Server and Video Server.
Can CVE-2019-18341 be exploited remotely?
Yes, CVE-2019-18341 can be exploited by remote attackers who have network access to the affected CCS server.
What potential impact does CVE-2019-18341 pose?
The exploitation of CVE-2019-18341 can lead to unauthorized access to sensitive system information and controls within the CCS.