#VU21194 Use of password hash with insufficient computational effort in SINEMA Remote Connect Server - CVE-2019-13922


Vulnerability identifier: #VU21194

Vulnerability risk: Medium

CVSSv4.0: 1.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:H/E:U/U:Green]

CVE-ID: CVE-2019-13922

CWE-ID: CWE-916

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
SINEMA Remote Connect Server
Server applications / SCADA systems

Vendor: Siemens

Description

The vulnerability allows a remote attacker to access to privileged user and device information.

The vulnerability exists due to the software generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort. A remote authenticated administrator can obtain the hash of a connected device’s password.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

SINEMA Remote Connect Server: before 2.0 SP1

External links
https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf
https://www.us-cert.gov/ics/advisories/icsa-19-260-02

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability


Multiple vulnerabilities in Siemens SINEMA Remote Connect Server