CVE-2019-19293: XSS
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Control Center Server (CCS) contains a reflected Cross-site Scripting (XSS) vulnerability that could allow an unauthenticated remote attacker to steal sensitive data or execute administrative actions on behalf of a legitimate administrator of the CCS web interface.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19293?
CVE-2019-19293 has been classified as a medium severity vulnerability due to its potential impact on sensitive data.
How do I fix CVE-2019-19293?
To fix CVE-2019-19293, upgrade the Control Center Server (CCS) to version 1.5.0 or higher which addresses the reflected XSS vulnerability.
Is CVE-2019-19293 specific to certain versions of Control Center Server?
Yes, CVE-2019-19293 affects all versions of Control Center Server prior to version 1.5.0.
Can CVE-2019-19293 allow unauthenticated access?
Yes, CVE-2019-19293 could allow an unauthenticated remote attacker to exploit the vulnerability.
What types of systems are impacted by CVE-2019-19293?
CVE-2019-19293 impacts Siemens Sinvr 3 Central Control Server and Siemens Sinvr 3 Video Server.