Lucene search
K

14 matches found

BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.3 views

The vulnerability of the central control server of SiNVR 3 Central Control Server (CCS) arises from an incorrect path name limitation in the web interface download section, which allows a hacker to gain access to the server’s file system, enabling them to download files from the server and copy files from the server.

The vulnerability of the central control server of SiNVR 3 Central Control Server CCS is related to an incorrect path name limitation in the web interface download section, leading to access to restricted directories. Exploiting this vulnerability could allow a malicious actor to gain access to t...

6.8CVSS6.6AI score0.01813EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.3 views

The vulnerability of the Central Control Server (CCS) and the Video Server of Siemens’ SiNVR 3 solution, related to the unencrypted storage of user credentials, allows a intruder to gain unauthorized access to users’ credentials.

The vulnerability of the Central Control Server CCS and the Video Server of Siemens’ SiNVR 3 solution for video management involves unencrypted storage of user credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to users’...

6.5CVSS5.9AI score0.00749EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.2 views

The vulnerability of the central control server of SiNVR 3 allows a hacker to read or modify the database of the central control server, as well as perform operations on the databases or operating system commands with administrator privileges.

The vulnerability of the central control server of SiNVR 3 Central Control Server lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to remotely read or modify the central control server’s database, as well as perform operations o...

9CVSS7.8AI score0.01999EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.4 views

The vulnerability of the Central Control Server (CCS) and the Video Server of Siemens’ SiNVR 3 solution, related to the lack of measures for cleaning input data, allows a intruder to inject malicious code into the web application of the Central Control Server.

The vulnerability of the Central Control Server CCS and the video server of Siemens’ SiNVR 3 solution relates to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to inject malicious code into the web application of the Central Control Server...

6.3CVSS6.6AI score0.0101EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.5 views

The vulnerability of the central control server of SiNVR 3 Central Control Server lies in the lack of measures for cleaning incoming data. This allows a intruder to gain unauthorized access to protected information or perform arbitrary actions on the vulnerable device.

The vulnerability of the central control server of SiNVR 3 Central Control Server lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information or perform arbitrary actio...

7.1CVSS6.5AI score0.0125EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.4 views

The vulnerability of the central control server of SiNVR 3 Central Control Server lies in security flaws in the XML-based communication protocol, allowing attackers to perform arbitrary actions on the vulnerable device.

The vulnerability of the central control server of SiNVR 3 Central Control Server is related to security vulnerabilities in the XML-based communication protocol. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable device remotely...

4.3CVSS5.6AI score0.01054EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2020/03/12 12:0 a.m.5 views

Siemens SiNVR 3 Cross-Site Scripting Vulnerability

SiNVR 3 is a video management platform.Central Control Server CCS is the central control server and Video Server is the video server. SiNVR 3 has a reflected cross-site scripting vulnerability in its implementation, which can be exploited by remote attackers to obtain sensitive data or perform...

6.1CVSS6.3AI score0.0125EPSS
Exploits0References1
CNVD
CNVD
added 2020/03/12 12:0 a.m.3 views

Siemens SiNVR 3 Insufficient Records Vulnerability

SiNVR 3 is a video management platform.Central Control Server CCS is the central control server and Video Server is the video server. SiNVR 3 has an insufficient security operation logging vulnerability in the XML-based communication protocol implementation, which can be exploited by a remote...

4.3CVSS7AI score0.01054EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2020/03/10 12:0 a.m.4 views

PT-2020-2442 · Sinvr · Sinvr 3 Central Control Server +1

Name of the Vulnerable Software and Affected Versions: SiNVR 3 Central Control Server CCS versions prior to V1.5.0 SiNVR 3 Video Server all versions Description: A path traversal vulnerability exists in the DOWNLOADS section of the web interface of the Control Center Server CCS. This vulnerabilit...

6.8CVSS6.3AI score0.01813EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2019/12/12 12:0 a.m.6 views

PT-2019-15357 · Sinvr · Sinvr 3 Central Control Server +2

Name of the Vulnerable Software and Affected Versions: Control Center Server CCS versions prior to V1.5.0 SiNVR 3 Central Control Server CCS all versions SiNVR 3 Video Server all versions Description: A directory traversal vulnerability has been identified in the XML-based communication protocol ...

7.7CVSS7.4AI score0.02647EPSS
Exploits0References4
CNVD
CNVD
added 2019/12/11 12:0 a.m.4 views

Siemens SiNVR 3 Central Control Server (CCS) Directory Traversal Vulnerability

SiNVR is the Siemens OEM version of SiVMS, a video management solution acquired by PKE Deutsch land gmmbH and formerly distributed by Schille Informationssysteme gmmbH. Siemens SiNVR 3 Central Control Server CCS has a directory traversal vulnerability in its xml-based communication protocol. An...

7.7CVSS7.1AI score0.02647EPSS
Exploits0References1
CNVD
CNVD
added 2019/12/11 12:0 a.m.3 views

Siemens SiNVR 3 Video Server and SiNVR 3 Central Control Server (CCS) Information Disclosure Vulnerability

SiNVR is the Siemens OEM version of SiVMS, a video management solution acquired by PKE Deutsch land gmmbH and formerly distributed by Schille Informationssysteme gmmbH. An information disclosure vulnerability exists in Siemens SiNVR 3 Video Server and SiNVR 3 Central Control Server CCS. A local...

5.5CVSS6AI score0.0025EPSS
Exploits0References1
CNVD
CNVD
added 2019/12/11 12:0 a.m.4 views

Siemens SiNVR 3 Central Control Server (CCS) Authentication Bypass Vulnerability

SiNVR is the Siemens OEM version of SiVMS, a video management solution acquired by PKE Deutsch land gmmbH and formerly distributed by Schille Informationssysteme gmmbH. Siemens SiNVR 3 Central Control Server CCS has an authentication bypass vulnerability in its xml-based communication protocol. A...

9.8CVSS7AI score0.02544EPSS
Exploits0References1
CNVD
CNVD
added 2019/12/11 12:0 a.m.5 views

Siemens SiNVR 3 Central Control Server (CCS) Authentication Bypass Vulnerability

SiNVR is the Siemens OEM version of SiVMS, a video management solution acquired by PKE Deutsch land gmmbH and formerly distributed by Schille Informationssysteme gmmbH. An authentication bypass vulnerability exists in the SFTP service default port 22/tcp of the Siemens SiNVR 3 Central Control...

5.3CVSS7AI score0.01618EPSS
Exploits0References1
Rows per page
Query Builder