CVE-2019-18337 in SiNVR 3 Central Control Server情報

要約

〜によって MITRE

A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The SiNVR 3 Central Control Server (CCS) contains an authentication bypass vulnerability in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. A remote attacker with network access to the CCS server could exploit this vulnerability to read the CCS users database, including the passwords of all users in obfuscated cleartext.

Be aware that VulDB is the high quality source for vulnerability data.

責任者

Siemens AG

予約する

2019年10月23日

モデレーション

承諾済み

エントリ

VDB-147141

EPSS

0.02544

アクティビティ

非常低い

ソース

Want to know what is going to be exploited?

We predict KEV entries!