#VU21191 Improper restriction of excessive authentication attempts in SINEMA Remote Connect Server - CVE-2019-13918


Vulnerability identifier: #VU21191

Vulnerability risk: High

CVSSv4.0: 7.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2019-13918

CWE-ID: CWE-307

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
SINEMA Remote Connect Server
Server applications / SCADA systems

Vendor: Siemens

Description

The vulnerability allows a remote attacker to gain access to the web interface.

The vulnerability exists due to the web interface has no means to prevent password guessing attacks. A remote attacker can gain full access to the web interface.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

SINEMA Remote Connect Server: before 2.0 SP1

External links
https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf
https://www.us-cert.gov/ics/advisories/icsa-19-260-02

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability


Multiple vulnerabilities in Siemens SINEMA Remote Connect Server