CVE-2019-19295 Information disclosure in Control Center Server (CCS)
An authenticated attacker can perform covert actions on Siemens Control Center Server that bypass security logging, hiding malicious activity from administrators.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-19295?
CVE-2019-19295 is a medium-severity vulnerability in Siemens Control Center Server (CCS), published on 10 Mar 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) does not enforce logging of security-relevant activities in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. An authenticated remote attacker could exploit this vulnerability to perform covert actions that are not visible in the application log.
Weakness: CWE-778
Which versions are affected by CVE-2019-19295?
It affects 2 products.
Products include Siemens Sinvr 3 Central Control Server, Siemens Sinvr 3 Video Server.
How do I fix CVE-2019-19295?
No fix has been published for CVE-2019-19295 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-19295 being exploited?
There is no known exploitation of CVE-2019-19295 in the wild and no public exploit code.
Other vulnerabilities in Siemens Control Center Server (CCS)
Sources
Also known as GHSA-mf3h-4jjh-89fr.