CVSS 3.1
4.9 mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NCVE-2019-13947
Medium (4.9) in siemens. EPSS 0.9% chance of exploitation in the next 30 days.
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The user configuration menu in the web interface of the
Control Center Server (CCS) transfers user passwords in clear to the
client (browser).
An attacker with administrative privileges for the web interface could be
able to read (and not only reset) passwords of other CCS users.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-317, CWE-312
- Published
- Modified
- Record from
- the NVD, synced
Affected
- siemens:sinvr_3_central_control_server
- siemens:sinvr_3_video_server