CVE-2019-18338 vulnerability in Siemens Products
Published on December 12, 2019
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains a directory traversal vulnerability in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. An authenticated remote attacker with network access to the CCS server could exploit this vulnerability to list arbitrary directories or read files outside of the CCS application context.
Weakness Type
Relative Path Traversal
The software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory. This allows attackers to traverse the file system to access files or directories that are outside of the restricted directory.
Products Associated with CVE-2019-18338
stack.watch emails you whenever new vulnerabilities are published in Siemens Sinvr 3 Central Control Server or Siemens Sinvr 3 Video Server. Just hit a watch button to start following.
Affected Versions
Siemens Control Center Server (CCS) Version All versions < V1.5.0 is affected by CVE-2019-18338Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.