CVE-2019-13947

A vulnerability has been identified in Control Center Server CCS All versions V1.5.0. The user configuration menu in the web interface of the Control Center Server CCS transfers user passwords in clear to the client browser. An attacker with administrative privileges for the web interface could b...

CVE-2019-13947

Summary (CVE-2019-13947) : In Siemens/SiNVR/CCS Control Center Server, versions prior to v1.5.0 expose a vulnerability where the web GUI transfers user passwords in clear text to the browser. An authenticated administrator can read other users’ passwords, not just reset them. The issue is documen...