CVE-2019-13922 Information disclosure in SINEMA Remote Connect Server

Q: Is CVE-2019-13922 being exploited?

There is no known exploitation of CVE-2019-13922 in the wild and no public exploit code.

Q: How do I fix CVE-2019-13922?

No fix has been published for CVE-2019-13922 yet. Limit exposure of the affected software until one is available.

Low 2.7 Published 13 Sep 2019 Updated 5 Aug 2024

An attacker with administrative privileges can obtain the hash of a connected device's password in the SINEMA Remote Connect Server.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-13922?

CVE-2019-13922 is a low-severity vulnerability in Siemens Sinema Remote Connect Server, published on 13 Sep 2019. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). An attacker with administrative privileges can obtain the hash of a connected device's password. The security vulnerability could be exploited by an attacker with network access to the SINEMA Remote Connect Server and administrative privileges. At the time of advisory publication no public exploitation of this security vulnerability was known.

Weakness: CWE-311

Which versions are affected by CVE-2019-13922?

It affects 1 product.

Products include Siemens Sinema Remote Connect Server.

How do I fix CVE-2019-13922?

No fix has been published for CVE-2019-13922 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-13922 being exploited?

There is no known exploitation of CVE-2019-13922 in the wild and no public exploit code.

All Siemens Sinema Remote Connect Server vulnerabilities

Sources

Also known as GHSA-gr98-g82j-6qxx.