CVE-2019-19295: Medium severity siemens sinvr 3 central control server vulnerability
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) does not enforce logging of security-relevant activities in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. An authenticated remote attacker could exploit this vulnerability to perform covert actions that are not visible in the application log.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19295?
CVE-2019-19295 is classified as a medium severity vulnerability due to the lack of logging for security-relevant activities.
How do I fix CVE-2019-19295?
To fix CVE-2019-19295, upgrade to Control Center Server (CCS) version 1.5.0 or later.
What software is affected by CVE-2019-19295?
CVE-2019-19295 affects all versions of Siemens Sinvr 3 Central Control Server and Video Server prior to version 1.5.0.
What impact does CVE-2019-19295 have on system security?
CVE-2019-19295 can potentially allow an attacker to exploit the lack of logging to execute unauthorized actions without detection.
Is CVE-2019-19295 an authenticated vulnerability?
Yes, CVE-2019-19295 requires authenticated remote access to exploit the vulnerability.