Advisories · Technology

Siemens SiNVR/SiVMS Video Server.

Every CVE that names Siemens SiNVR/SiVMS Video Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2019-19299 CVE record

CVSS 7.5 High

Weak encryption in Siemens SiNVR/SiVMS Video Server
- Siemens SiNVR/SiVMS Video Server
- Weak cryptography or TLS
Not analysed yet 10 Mar 2020
CVE-2019-19298 CVE record

CVSS 7.5 High

Improper input validation in Siemens SiNVR/SiVMS Video Server
- Siemens SiNVR/SiVMS Video Server
- CWE-20
Not analysed yet 10 Mar 2020
CVE-2019-19297 CVE record

CVSS 7.5 High

Path traversal in Siemens SiNVR/SiVMS Video Server
- Siemens SiNVR/SiVMS Video Server
- Path traversal
Not analysed yet 10 Mar 2020
CVE-2019-19296 CVE record

CVSS 6.8 Medium

Path traversal in Siemens SiNVR/SiVMS Video Server
- Siemens SiNVR/SiVMS Video Server
- Path traversal
Not analysed yet 10 Mar 2020
CVE-2019-19291 CVE record

CVSS 5.3 Medium

Siemens Control Center Server (CCS): A vulnerability has been identified in Control Center Server (CCS) (All versions <…
- Siemens Control Center Server (CCS)
- Siemens SiNVR/SiVMS Video Server
- CWE-313
Not analysed yet 10 Mar 2020
CVE-2019-18340 CVE record

CVSS 5.5 Medium

Broken or risky cryptographic algorithm in Siemens Control Center Server (CCS) and others
- Siemens Control Center Server (CCS)
- Siemens SiNVR/SiVMS Video Server
- Weak cryptography or TLS
Not analysed yet 12 Dec 2019
CVE-2019-18339 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Siemens SiNVR/SiVMS Video Server
- Siemens SiNVR/SiVMS Video Server
- Authentication bypass
Not analysed yet 12 Dec 2019