Description
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server
(CCS) contains an authentication bypass vulnerability.
A remote attacker with network access to the CCS server could
exploit this vulnerability to read data from the EDIR directory
(for example, the list of all configured stations).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Control Center Server (CCS) | All versions < V1.5.0 | — |
Advisories 3
- ICSA-20-070-01 ICSA-20-070-01_Siemens and PKE SiNVR/SiVMS Video Server (Update B) CISA ICS & IT advisories · Jan 9, 2024
- SSA-761844 SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) Siemens ProductCERT · Jan 9, 2024
- ICSA-21-103-10 Siemens and PKE Control Center Server CISA ICS & IT advisories · Apr 13, 2021