CVE-2019-19297: Path Traversal
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server contains a path traversal vulnerability, that could allow an unauthenticated remote attacker to access and download arbitrary files from the server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19297?
CVE-2019-19297 has been classified as a medium severity vulnerability.
How do I fix CVE-2019-19297?
To fix CVE-2019-19297, upgrade to Siemens SiNVR/SiVMS Video Server version 5.0.0 or higher.
What type of vulnerability is CVE-2019-19297?
CVE-2019-19297 is a path traversal vulnerability in the streaming service of the affected video servers.
Who is affected by CVE-2019-19297?
CVE-2019-19297 affects all versions of SiNVR/SiVMS Video Server prior to version 5.0.0.
What could an attacker achieve by exploiting CVE-2019-19297?
An attacker could exploit CVE-2019-19297 to access and download arbitrary files from the server without authentication.