CVE-2019-19299: Weak Encryption
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0 < V5.0.2), SiNVR/SiVMS Video Server (All versions >= V5.0.2). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server applies weak cryptography when exposing device (camera) passwords. This could allow an unauthenticated remote attacker to read and decrypt the passwords and conduct further attacks.
Other sources
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server applies weak cryptography when exposing device (camera) passwords. This could allow an unauthenticated remote attacker to read and decrypt the passwords and conduct further attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19299?
CVE-2019-19299 has been rated as a high-severity vulnerability due to its impact on the security of the streaming service.
How do I fix CVE-2019-19299?
To mitigate CVE-2019-19299, update the SiNVR/SiVMS Video Server to version 5.0.2 or later.
What type of vulnerability is CVE-2019-19299?
CVE-2019-19299 is a cryptographic vulnerability affecting the streaming service of the SiNVR/SiVMS Video Server.
Which versions of SiNVR/SiVMS are affected by CVE-2019-19299?
CVE-2019-19299 affects all versions of SiNVR/SiVMS Video Server prior to version 5.0.0, and between versions 5.0.0 and 5.0.2.
What is the default port affected by CVE-2019-19299?
The default port affected by CVE-2019-19299 is 5410/tcp used by the SiVMS/SiNVR Video Server streaming service.