Medium severity6.8NVD Advisory· Published Mar 10, 2020· Updated Jun 17, 2026

CVE-2019-19296

Description

A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default ports 21/tcp and 5411/tcp) of the SiVMS/SiNVR Video Server contain a path traversal vulnerability that could allow an authenticated remote attacker to access and download arbitrary files from the server, if the FTP services are enabled.

Affected products

SiNVR/SiNVR Video Serverllm-create
Range: <V5.0.0
SiVMS/SiVMS Video Serverllm-create
Range: <V5.0.0
Siemens Foundation/SiNVR/SiVMS Video Serverllm-fuzzy
Range: <V5.0.0
Siemens Foundation/SiNVR Video Servercpe-rescue
Range: All versions < V5.0.0

Patches

Vulnerability mechanics

References

cert-portal.siemens.com/productcert/pdf/ssa-844761.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000