Description
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains an SQL injection
vulnerability in its XML-based communication protocol as provided by default
on ports 5444/tcp and 5440/tcp.
An authenticated remote attacker could exploit this vulnerability to
read or modify the CCS database and potentially execute administrative
database operations or operating system commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Control Center Server (CCS) | All versions < V1.5.0 | — |
Advisories 3
- ICSA-20-070-01 ICSA-20-070-01_Siemens and PKE SiNVR/SiVMS Video Server (Update B) CISA ICS & IT advisories · Jan 9, 2024
- SSA-761844 SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) Siemens ProductCERT · Jan 9, 2024
- ICSA-21-103-10 Siemens and PKE Control Center Server CISA ICS & IT advisories · Apr 13, 2021