SSA-844761 | Vulnetix

SSA-844761 PUBLISHED CVSS 7.5 HIGH

The FTP services of the SiVMS/SiNVR Video Server and the Control Center Server (CCS) maintain log files that store login credentials in cleartext. In configurations where the FTP service is enabled, authenticated remote attackers could extract login credentials of other users of the service.

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C

Affected Products

Vendor	Product	Versions
Siemens	SiNVR/SiVMS Video Server

Timeline

Mar 10, 2020 CVE Published
Jan 9, 2024 CVE Updated

References

https://cert-portal.siemens.com/productcert/csaf/ssa-844761.json advisory
https://cert-portal.siemens.com/productcert/html/ssa-844761.html advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf advisory
https://cert-portal.siemens.com/productcert/txt/ssa-844761.txt advisory

Open in Interactive Console →