Siemens and PKE Control Center Server
Successful exploitation of these vulnerabilities may allow an attacker to read and write arbitrary files and sensitive data and execute commands and arbitrary code.
beschreibt (12)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-19295US | medium4.3 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) does not enforce logging of
security-relevant activities… | ||||
| CVE-2019-19294US | low3.5 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Control Center Server (CCS) contains
multiple stored Cross-site… | ||||
| CVE-2019-19293US | medium4.3 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Control Center Server (CCS) contains a
reflected Cross-site Scr… | ||||
| CVE-2019-19292US | medium6.5 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains an SQL injection
vulnerability in its XML-based… | ||||
| CVE-2019-19291US | low3.5OT erhöht | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). The FTP services of the SiVMS/SiNVR Vi… | ||||
| CVE-2019-19290US | medium4.0 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The DOWNLOADS section in the web interface of the Control Center
Server (CCS) contains a… | ||||
| CVE-2019-18342US | high7.5 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server
(CCS) does not prope… | ||||
| CVE-2019-18341US | medium5.0 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server
(CCS) contains an au… | ||||
| CVE-2019-18340US | low2.1OT erhöht | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), Control Center Server (CCS) (All versions >= V1.5.0), SiNVR/SiVMS Video Server (All vers… | ||||
| CVE-2019-18338US | medium4.0 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains a directory traversal
vulnerability in its XML-… | ||||
| CVE-2019-18337US | medium5.0 | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains an authentication bypass
vulnerability in its X… | ||||
| CVE-2019-13947US | medium4.9OT erhöht | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The user configuration menu in the web interface of the
Control Center Server (CCS) tran… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) - CSAF Versionexternal
- SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) - PDF Versionexternal
- SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS) - TXT Versionexternal
- ICS Advisory ICSA-21-103-10 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- ICS Advisory ICSA-21-103-10 Web Versionself
Behebungen (25)
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- MitigationControl Center Server (CCS)
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
- Kein Fix verfügbarControl Center Server (CCS)
Currently no remediation is available
- BehobenControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - BehobenControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - BehobenControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - BehobenControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - BehobenControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - BehobenControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - BehobenControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - BehobenControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - BehobenControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - BehobenControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - BehobenControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/ - BehobenControl Center Server (CCS)
Update to V1.5.0 or later version
https://sivms.cloud/control-center-server-ccs/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan