#VU23597 Path traversal in SiNVR 3 Central Control Server (CCS) - CVE-2019-18338
Published: December 13, 2019
Vulnerability identifier: #VU23597
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2019-18338
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
SiNVR 3 Central Control Server (CCS)
SiNVR 3 Central Control Server (CCS)
Software vendor:
Siemens
Siemens
Description
The vulnerability allows a remote attacker to perform directory traversal attacks.
The vulnerability exists due to input validation error when processing directory traversal sequences in the XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. A remote authenticated attacker can send a specially crafted HTTP request and list arbitrary directories or read files outside of the CCS application context.
Remediation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.