CVE-2019-18341
Quick assessment
Affected
Siemens Control Center Server (CCS)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Siemens SiNVR 3 Central Control Server（CCS）和SiNVR 3 Video Server都是德国西门子（Siemens）公司的产品。SiNVR 3 Central Control Server是一款用于SiNVR 3视频监控系统的中央控制服务器。SiNVR 3 Video Server是一款用于SiNVR 3视频监控系统的视频服务器。 SiNVR 3 Central Control Server和SiNVR 3 Video Server中存在授权问题漏洞。该漏洞源于
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2019-18341
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server
(CCS) contains an authentication bypass vulnerability.
A remote attacker with network access to the CCS server could
exploit this vulnerability to read data from the EDIR directory
(for example, the list of all configured stations).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
认证机制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Siemens SiNVR 3 Central Control Server和SiNVR 3 Video Server 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Siemens SiNVR 3 Central Control Server（CCS）和SiNVR 3 Video Server都是德国西门子（Siemens）公司的产品。SiNVR 3 Central Control Server是一款用于SiNVR 3视频监控系统的中央控制服务器。SiNVR 3 Video Server是一款用于SiNVR 3视频监控系统的视频服务器。 SiNVR 3 Central Control Server和SiNVR 3 Video Server中存在授权问题漏洞。该漏洞源于
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Siemens | Control Center Server (CCS) | All versions < V1.5.0 | - |
|
II. Public POCs for CVE-2019-18341
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-18341
请登录查看更多情报信息。
Vendor Advisories for CVE-2019-18341 (2)
-
https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf x_refsource_CONFIRM
-
https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf x_refsource_MISC
Same Patch Batch · Siemens · 2019-12-12 · 60 CVEs total
| CVE-2019-18342 | 9.9 CRITICAL | Siemens SiNVR 3 Central Control Server和SiNVR 3 Video Server 安全漏洞 |
| CVE-2019-18337 | 9.8 CRITICAL | Siemens SiNVR 3 Central Control Server和SiNVR 3 Video Server 授权问题漏洞 |
| CVE-2019-18339 | 9.8 CRITICAL | Siemens SiNVR 3 Central Control Server 访问控制错误漏洞 |
| CVE-2019-18338 | 7.7 HIGH | Siemens SiNVR 3 Central Control Server和SiNVR 3 Video Server 路径遍历漏洞 |
| CVE-2019-18340 | 5.5 MEDIUM | Siemens SiNVR 3 Central Control Server和SiNVR 3 Video Server 加密问题漏洞 |
| CVE-2019-13947 | 4.9 MEDIUM | Siemens SiNVR 3 安全漏洞 |
| CVE-2019-18302 | Siemens SPPA-T3000 输入验证错误漏洞 | |
| CVE-2019-18331 | Siemens SPPA-T3000 信息泄露漏洞 | |
| CVE-2019-18293 | Siemens SPPA-T3000 缓冲区错误漏洞 | |
| CVE-2019-18292 | Siemens SPPA-T3000 缓冲区错误漏洞 | |
| CVE-2019-18291 | Siemens SPPA-T3000 缓冲区错误漏洞 | |
| CVE-2019-18290 | Siemens SPPA-T3000 缓冲区错误漏洞 | |
| CVE-2019-18289 | Siemens SPPA-T3000 缓冲区错误漏洞 | |
| CVE-2019-18288 | Siemens SPPA-T3000 代码问题漏洞 | |
| CVE-2019-18287 | Siemens SPPA-T3000 信息泄露漏洞 | |
| CVE-2019-18286 | Siemens SPPA-T3000 信息泄露漏洞 | |
| CVE-2019-18285 | Siemens SPPA-T3000 缓冲区错误漏洞 | |
| CVE-2019-18284 | Siemens SPPA-T3000 访问控制错误漏洞 | |
| CVE-2019-18283 | Siemens SPPA-T3000 代码问题漏洞 | |
| CVE-2019-18327 | Siemens SPPA-T3000 缓冲区错误漏洞 |
Showing top 20 of 60 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Control Center Server (CCS)
-
CVE-2019-19291
Siemens SiNVR 3 Central Control Server和SiNVR 3 Video Server -
CVE-2019-19293
Siemens SiNVR 3 Central Control Server和SiNVR 3 Video Server -
CVE-2019-19295
Siemens SiNVR 3 Central Control Server和SiNVR 3 Video Server -
CVE-2019-19294
Siemens SiNVR 3 Central Control Server 跨站脚本漏洞 -
CVE-2019-19292
Siemens SiNVR 3 Central Control Server和SiNVR 3 Video Server
Same vendor: Siemens
-
CVE-2026-54548
kas: Persistent SSH Host Key Checking Disablement -
CVE-2026-47192
kas's late signature validation may allow unnoticed reposito -
CVE-2026-47191
kas checks out SHA-like git branches as valid commits -
CVE-2026-69109
Siemens License Server 路径遍历漏洞 -
CVE-2026-69108
Siemens License Server 权限许可和访问控制问题漏洞
Same weakness: CWE-287
-
CVE-2026-79938
Dell PowerProtect Cyber Recovery 20.3前版本认证缺陷 -
CVE-2026-80192
better-auth SSO before 1.6.27 Domain Ownership Authenticatio -
CVE-2026-44476
Doorkeeper OpenID Connect: Dynamic Client Registration featu -
CVE-2026-68569
Apache Tomcat: Principal lookup can fail open in some cases -
CVE-2026-79787
Alluxio through 2.9.5 S3 REST Proxy Authentication Bypass vi
V. Comments for CVE-2019-18341
No comments yet