VDB
CVE-2019-13922
CVE-2019-13922
PUBLISHED
CVSS 2.700000047683716 LOW
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). An attacker with administrative privileges can obtain the hash of a connected device's password. The security vulnerability could be exploited by an attacker with network access to the SINEMA Remote Connect Server and administrative privileges. At the time of advisory publication no public exploitation of this security vulnerability was known.
EPSS 0.10% · 26.6th percentile
Risk Scores
CVSS 3.1
2.700000047683716
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.10%
26.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| siemens | sinema_remote_connect_server | 0, 2.0 |
| Siemens AG | SINEMA Remote Connect Server | * |
Exploit Intelligence
Timeline
- Sep 10, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-250618.pdf advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-187667.pdf advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-834884.pdf advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-191683.pdf advisory
- https://nvd.nist.gov/vuln/detail/CVE-2019-13922 advisory