CVE-2019-19291: Medium severity siemens sinvr 3 central control server vulnerability
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). The FTP services of the SiVMS/SiNVR Video Server and the Control Center Server (CCS) maintain log files that store login credentials in cleartext. In configurations where the FTP service is enabled, authenticated remote attackers could extract login credentials of other users of the service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19291?
CVE-2019-19291 has a medium severity rating due to the exposure of login credentials in cleartext.
How do I fix CVE-2019-19291?
To fix CVE-2019-19291, update to Control Center Server versions 1.5.0 or higher and SiNVR/SiVMS Video Server versions 5.0.0 or higher.
Which software versions are affected by CVE-2019-19291?
CVE-2019-19291 affects all versions of Control Center Server prior to 1.5.0 and all versions of SiNVR/SiVMS Video Server prior to 5.0.0.
What is the impact of CVE-2019-19291?
The impact of CVE-2019-19291 includes potential unauthorized access to the system due to the exposure of sensitive login information.
Is there a workaround for CVE-2019-19291?
Currently, the recommended approach is to upgrade to the latest versions as no specific workaround is provided for CVE-2019-19291.