CVE-2019-19296: Path Traversal
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default ports 21/tcp and 5411/tcp) of the SiVMS/SiNVR Video Server contain a path traversal vulnerability that could allow an authenticated remote attacker to access and download arbitrary files from the server, if the FTP services are enabled.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19296?
CVE-2019-19296 is considered a high-severity vulnerability due to its potential for unauthorized access to sensitive files.
How do I fix CVE-2019-19296?
To mitigate CVE-2019-19296, upgrade to version 5.0.0 or later of the SiNVR/SiVMS Video Server.
What systems are affected by CVE-2019-19296?
CVE-2019-19296 affects all versions of SiNVR and SiVMS Video Server prior to version 5.0.0.
Can CVE-2019-19296 be exploited remotely?
Yes, CVE-2019-19296 can be exploited remotely by an authenticated attacker via the FTP services.
What type of vulnerability is CVE-2019-19296?
CVE-2019-19296 is classified as a path traversal vulnerability, allowing unauthorized file access.