Siemens SiNVR 3 Central Control Server XML Data improper authentication

Summaryinfo

A vulnerability, which was classified as critical, has been found in Siemens SiNVR 3 Central Control Server and SiNVR 3 Video Server. Impacted is an unknown function of the component XML Data Handler. Performing a manipulation results in improper authentication. This vulnerability is identified as CVE-2019-18337. The attack can be initiated remotely. There is not any exploit available. It is suggested to use restrictive firewalling.

Detailsinfo

A vulnerability classified as critical has been found in Siemens SiNVR 3 Central Control Server and SiNVR 3 Video Server (affected version unknown). This affects an unknown functionality of the component XML Data Handler. The manipulation with an unknown input leads to a improper authentication vulnerability. CWE is classifying the issue as CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The SiNVR 3 Central Control Server (CCS) contains an authentication bypass vulnerability in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. A remote attacker with network access to the CCS server could exploit this vulnerability to read the CCS users database, including the passwords of all users in obfuscated cleartext.

The weakness was released 12/12/2019. This vulnerability is uniquely identified as CVE-2019-18337 since 10/23/2019. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 03/11/2024).

It is possible to mitigate the weakness by firewalling .

Entries connected to this vulnerability are available at VDB-147145, VDB-147144, VDB-147143 and VDB-147142. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Siemens

Name

• SiNVR 3 Central Control Server
• SiNVR 3 Video Server

License

• commercial

Website

• Vendor: https://www.siemens.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion