VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Sep 13, 2019· Updated Jun 17, 2026

CVE-2019-13918

CVE-2019-13918

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). The web interface has no means to prevent password guessing attacks. The vulnerability could be exploited by an attacker with network access to the vulnerable software, requiring no privileges and no user interaction. The vulnerability could allow full access to the web interface. At the time of advisory publication no public exploitation of this security vulnerability was known.

Affected products

5
  • Siemens Foundation/Sinema Remote Connect Server4 versions
    cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*range: <2.0
    • cpe:2.3:a:siemens:sinema_remote_connect_server:2.0:-:*:*:*:*:*:*
    • cpe:2.3:a:siemens:sinema_remote_connect_server:2.0:hf1:*:*:*:*:*:*
    • (no CPE)range: < V2.0 SP1
  • Siemens AG/SINEMA Remote Connect Serverv5
    Range: All versions < V2.0 SP1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.