PT-2019-15361 · Unknown · Control Center Server

CVE-2019-18342 · Publicado 2019-12-12 · Atualizado 2024-01-09

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Crítica

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Control Center Server (CCS) versions prior to V1.5.0

Description A vulnerability has been identified in the SFTP service of the Control Center Server, which does not properly limit its capabilities. This could allow an unauthenticated remote attacker with network access to the server to read or delete arbitrary files, or access other resources on the same server.

Recommendations For versions prior to V1.5.0, update to version V1.5.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the SFTP service on the default port 22/tcp to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-749

Identificadores relacionados

CVE-2019-18342

Produtos afetados

Control Center Server

Referências · 5

• https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-18342 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-18342 · Nota de Segurança
• https://t.me/cvenotify/13152 · Publicação no Telegram
• https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf · Aviso do Fabricante