Description
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Control Center Server (CCS) contains a
reflected Cross-site Scripting (XSS) vulnerability
that could allow an unauthenticated remote attacker to steal sensitive data
or execute administrative actions on behalf of a legitimate administrator
of the CCS web interface.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Control Center Server (CCS) | All versions < V1.5.0 | — |
Advisories 3
- ICSA-20-070-01 ICSA-20-070-01_Siemens and PKE SiNVR/SiVMS Video Server (Update B) CISA ICS & IT advisories · Jan 9, 2024
- SSA-761844 SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) Siemens ProductCERT · Jan 9, 2024
- ICSA-21-103-10 Siemens and PKE Control Center Server CISA ICS & IT advisories · Apr 13, 2021