#VU21194 Use of password hash with insufficient computational effort in SINEMA Remote Connect Server


Published: 2019-09-18

Vulnerability identifier: #VU21194

Vulnerability risk: Medium

CVSSv3.1: 5.8 [CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2019-13922

CWE-ID: CWE-916

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
SINEMA Remote Connect Server
Server applications / SCADA systems

Vendor: Siemens

Description

The vulnerability allows a remote attacker to access to privileged user and device information.

The vulnerability exists due to the software generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort. A remote authenticated administrator can obtain the hash of a connected device’s password.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

SINEMA Remote Connect Server: All versions

External links
http://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf
http://www.us-cert.gov/ics/advisories/icsa-19-260-02

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability


Multiple vulnerabilities in Siemens SINEMA Remote Connect Server