Summary
Successful exploitation of these vulnerabilities could allow an attacker to read the SiVMS/SiNVR users database, including the passwords of all users in obfuscated cleartext and configuration files.
Vulnerabilities 2
-
Critical 9.8
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The HTTP service (default port…
-
Medium 5.5
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), Control Center Server (CCS)…
Revision history
-
#2
ICSA-19-344-02 Siemens and PKE SiNVR SiVMS Video Server (Update A)
-
#1
ICSA-19-344-02 Siemens SiNVR 3
References
-
ICS Advisory ICSA-19-344-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-344-02
-
Recommended Practices
https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B