CVE-2019-19291

Katalog CVE

CVSS 5.3 · Medium EPSS 0,75%

Kerentanan Cleartext Storage in a File or on Disk pada siemens sinvr 3 central control server, siemens sinvr 3 video server. Skor CVSS 3.1 5.3 (Medium) menurut siemens.com.

Deskripsi (NVD)

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). The FTP services of the SiVMS/SiNVR Video Server and the Control Center Server (CCS) maintain log files that store login credentials in cleartext. In configurations where the FTP service is enabled, authenticated remote attackers could extract login credentials of other users of the service.

Rincian

Terbit di NVD

10 Maret 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber siemens.com
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-313: Cleartext Storage in a File or on Disk
CWE-312: Cleartext Storage of Sensitive Information

EPSS (30 hari)

0,75% peluang dieksploitasi; lebih tinggi dari 53,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf mitigasi · advisory vendor
• https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf