Improper Authorization in Siemens products - CVE-2019-6581

Vulnerability identifier: #VU18811

CSH Severity: Medium

CVSS v4: 8.6 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-6581

CWE-ID: CWE-285

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to change user roles without proper authorization.

The vulnerability exist due to missing authorization on a Port 80/TCP. An authenticated attacker with network access to Port 80/TCP can change user roles without proper authorization.

Siveillance VMS 2019 R1
Siveillance VMS 2018 R3
Siveillance VMS 2018 R2
Siveillance VMS 2017 R2
Siveillance VMS 2018 R1

Install updates from vendor's website.

Siveillance VMS 2019 R1 - update to 13.1a
Siveillance VMS 2018 R3 - update to 12.3a
Siveillance VMS 2018 R2 - update to 12.2a
Siveillance VMS 2017 R2 - update to 11.2a
Siveillance VMS 2018 R1 - update to 12.1a

• https://cert-portal.siemens.com/productcert/pdf/ssa-212009.pdf
• https://ics-cert.us-cert.gov/advisories/ICSA-19-162-01

• Multiple vulnerabilities in Siemens Siveillance VMS