Siemens Sinvr 3 Central Control Server vulnerabilities

14 CVEs affecting Siemens Sinvr 3 Central Control Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-19297, published 2020-03-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-19297, published 2020-03-10. High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days. A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server contains a path traversal…
CVE-2019-18339, published 2019-12-12. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The HTTP service (default port 5401/tcp) of the SiVMS/SiNVR Video Server contains an authentication bypass…
CVE-2019-18338, published 2019-12-12. High severity, CVSS 7.7. EPSS: 2.6% chance of exploitation in the next 30 days. A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains a directory traversal vulnerability in its XML-based communication…
CVE-2019-18337, published 2019-12-12. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains an authentication bypass vulnerability in its XML-based…
CVE-2019-19292, published 2020-03-10. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains an SQL injection vulnerability in its XML-based communication…
CVE-2019-19290, published 2020-03-10. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The DOWNLOADS section in the web interface of the Control Center Server (CCS) contains a path traversal…
CVE-2019-19296, published 2020-03-10. Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default ports 21/tcp and 5411/tcp) of the SiVMS/SiNVR Video Server contain a path…
CVE-2019-18341, published 2019-12-12. Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server (CCS) contains an authentication bypass…
CVE-2019-19293, published 2020-03-10. Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Control Center Server (CCS) contains a reflected Cross-site Scripting (XSS)…
CVE-2019-19295, published 2020-03-10. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) does not enforce logging of security-relevant activities in its XML-based…

Latest

CVE-2019-19294, published 2020-03-10. Medium severity, CVSS 6.3. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Control Center Server (CCS) contains multiple stored Cross-site Scripting (XSS)…
CVE-2019-19291, published 2020-03-10. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). The FTP services of the SiVMS/SiNVR Video Server and the…
CVE-2019-18340, published 2019-12-12. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), Control Center Server (CCS) (All versions >= V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0),…