CVEvulnerability

CVE-2019-13918

9.8 CRITICAL Published 2019-09-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-09-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-307, CWE-521

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). The web interface has no means to prevent password guessing attacks. The vulnerability could be exploited by an attacker with network access to the vulnerable software, requiring no privileges and no user interaction. The vulnerability could allow full access to the web interface. At the time of advisory publication no public exploitation of this security vulnerability was known.

Affected configurations

• siemens sinema remote connect server (< 2.0) • siemens sinema remote connect server 2.0

Related

Weakness · CWE (2)

  • CWE-307 Improper Restriction of Excessive Authentication Attempts weakness
  • CWE-521 Weak Password Requirements weakness

References