Skip to content
OpenAdvisories
Medium · 6.8 CVE-2019-19296 EUVD-2019-8920GHSA-5q84-q9g2-g3jr

A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default ports 21/tcp and 541…

Published Mar 10, 2020 · Updated Aug 5, 2024 · Assigned by siemens

Description

A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default ports 21/tcp and 5411/tcp) of the SiVMS/SiNVR Video
Server contain a path traversal vulnerability
that could allow an authenticated remote attacker to access and download
arbitrary files from the server, if the FTP services are enabled.

Affected products

VendorProductAffectedFixed
Siemens SiNVR/SiVMS Video Server All versions < V5.0.0 —

Advisories 1

References