Summary
The advisory informs about multiple vulnerabilities in the Central Control Server (CCS) application, as initially
reported in SSA-761617 (
https://cert-portal.siemens.com/productcert/html/ssa-761617.html) on 2019-12-10
and SSA-844761 (https://cert-portal.siemens.com/productcert/html/ssa-844761.html) on 2020-03-10.
The vulnerabilities involve authentication bypass (CVE-2019-18337, CVE-2019-18341),
path traversal (CVE-2019-18338, CVE-2019-19290), information disclosure (CVE-2019-13947, CVE-2019-18340, CVE-2019-19291),
privilege escalation (CVE-2019-18342), SQL injection (CVE-2019-19292), cross-site scripting (CVE-2019-19293, CVE-2019-19294), and
insufficient logging (CVE-2019-19295).
PKE has released an update for CCS that fixes the reported vulnerabilities, except for CVE-2019-18340. For details contact PKE (
https://pke.at/).
Siemens recommends to update to the latest version and recommends specific countermeasures to mitigate the vulnerabilities.
Vulnerabilities 12
-
Critical 9.9
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default p…
-
Critical 9.8
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (…
-
High 8.8
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (…
-
High 7.7
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (…
-
Medium 6.5
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The DOWNLOADS section in th…
-
Medium 6.3
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Co…
-
Medium 6.1
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Co…
-
Medium 5.5
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), Control Center Server (CCS)…
-
Medium 5.3
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default p…
-
Medium 5.3
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (A…
-
Medium 4.9
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The user configuration menu…
-
Medium 4.3
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (…
Revision history
-
#2
Cleanup: removed orphaned links to vendor advisories and software downloads
-
#1
Publication Date
References
-
SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-761844.html
-
SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
-
SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-761844.txt
-
ICS Advisory ICSA-20-070-01 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-070-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B