A vulnerability classified as critical has been found in Siemens SiNVR 3 Central Control Server and SiNVR 3 Video Server (affected version unknown). This affects an unknown functionality of the component XML Data Handler. The manipulation with an unknown input leads to a improper authentication vulnerability. CWE is classifying the issue as CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The SiNVR 3 Central Control Server (CCS) contains an authentication bypass vulnerability in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. A remote attacker with network access to the CCS server could exploit this vulnerability to read the CCS users database, including the passwords of all users in obfuscated cleartext.

The weakness was released 12/12/2019. This vulnerability is uniquely identified as CVE-2019-18337 since 10/23/2019. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 03/11/2024).

It is possible to mitigate the weakness by firewalling .

Entries connected to this vulnerability are available at 147145, 147144, 147143 and 147142.

Productinfo

Vendor

• Siemens

Name

• SiNVR 3 Central Control Server
• SiNVR 3 Video Server

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion