Siemens and PKE Control Center Server
Successful exploitation of these vulnerabilities may allow an attacker to read and write arbitrary files and sensitive data and execute commands and arbitrary code.
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-19295US | medium4.3 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) does not enforce logging of
security-relevant activities… | ||||
| CVE-2019-19294US | low3.5 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Control Center Server (CCS) contains
multiple stored Cross-site… | ||||
| CVE-2019-19293US | medium4.3 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Control Center Server (CCS) contains a
reflected Cross-site Scr… | ||||
| CVE-2019-19292US | medium6.5 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains an SQL injection
vulnerability in its XML-based… | ||||
| CVE-2019-19291US | low3.5OT elevated | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). The FTP services of the SiVMS/SiNVR Vi… | ||||
| CVE-2019-19290US | medium4.0 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The DOWNLOADS section in the web interface of the Control Center
Server (CCS) contains a… | ||||
| CVE-2019-18342US | high7.5 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server
(CCS) does not prope… | ||||
| CVE-2019-18341US | medium5.0 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server
(CCS) contains an au… | ||||
| CVE-2019-18340US | low2.1OT elevated | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), Control Center Server (CCS) (All versions >= V1.5.0), SiNVR/SiVMS Video Server (All vers… | ||||
| CVE-2019-18338US | medium4.0 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains a directory traversal
vulnerability in its XML-… | ||||
| CVE-2019-18337US | medium5.0 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains an authentication bypass
vulnerability in its X… | ||||
| CVE-2019-13947US | medium4.9OT elevated | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The user configuration menu in the web interface of the
Control Center Server (CCS) tran… | ||||
references
External citations — patches, advisories, analysis.
- SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) - CSAF Versionexternal
- SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) - PDF Versionexternal
- SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) - TXT Versionexternal
- ICS Advisory ICSA-21-103-10 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- ICS Advisory ICSA-21-103-10 Web Versionself
remediations (25)
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- No fix availableControl Center Server (CCS)
Currently no remediation is available
- FixedControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - FixedControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - FixedControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - FixedControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - FixedControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - FixedControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - FixedControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - FixedControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - FixedControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - FixedControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - FixedControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - FixedControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan