CVE-2019-18342 in SiNVR 3 Central Control Serverinformation

Résumé

par MITRE

A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The SFTP service (default port 22/tcp) of the SiNVR 3 Central Control Server (CCS) does not properly limit its capabilities to the specified purpose. In conjunction with CVE-2019-18341, an unauthenticated remote attacker with network access to the CCS server could exploit this vulnerability to read or delete arbitrary files, or access other resources on the same server.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

Siemens AG

Réserver

23/10/2019

Modérer

accepté

Entrée

VDB-147146

CPE

prêt

EPSS

0.02126

KEV

non

Activités

très faible

Sources

Do you want to use VulDB in your project?

Use the official API to access entries easily!