Skip to content
OpenAdvisories
High SSA-844761 5 CVEs

SSA-844761: Multiple Vulnerabilities in SiNVR/SiVMS Video Server

Published Mar 10, 2020 · Updated Jan 9, 2024 · Revision 4

Vendor: Siemens Product: SiNVR/SiVMS Video Server

Summary

The Video Server application in SiNVR/SiVMS solutions contains five vulnerabilities
involving information disclosure (CVE-2019-19291, CVE-2019-19299),
path traversal (CVE-2019-19296, CVE-2019-19297), and denial-of-service (CVE-2019-19298).

PKE has released updates of the application that fixes the reported vulnerabilities, except for CVE-2019-19299.
This update is not available under the former Siemens OEM brand name SiNVR.
For details contact PKE (
https://pke.at/).

Vulnerabilities 5

Revision history

  1. #4

    Cleanup: removed orphaned links to vendor advisories and software downloads

  2. #3

    Added solution for CVE-2019-19298 and related additional security hardening measures

  3. #2

    Added partial solution for SiNVR/SiVMS Video Server; removed information for Control Center Server (CCS), which is now addressed in SSA-761844

  4. #1

    Publication Date

References