cnvd-2019-31661
Vulnerability from cnvd
Title
Siemens SINEMA Remote Connect Server密码猜测漏洞
Description
Siemens SINEMA Remote Connect Server是一款服务器应用程序。 SINEMA Remote Connect可帮助用户访问远程设备或机器,从而可轻松而且安全地进行维护。 Siemens SINEMA Remote Connect Server存在安全漏洞。攻击者可以通过网络访问易受攻击的软件来攻击此漏洞,无需任何权限和用户交互。
Severity
Patch Name
Siemens SINEMA Remote Connect Server密码猜测漏洞的补丁
Patch Description
Siemens SINEMA Remote Connect Server是一款服务器应用程序。 SINEMA Remote Connect可帮助用户访问远程设备或机器,从而可轻松而且安全地进行维护。 Siemens SINEMA Remote Connect Server存在安全漏洞。攻击者可以通过网络访问易受攻击的软件来攻击此漏洞,无需任何权限和用户交互。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description

用户可参考如下供应商提供的安全公告获得补丁信息: https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf

Reference
https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf
Impacted products
Name
SIEMENS SINEMA Remote Connect Server < V2.0 SP1
Show details on source website


{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-13918"
    }
  },
  "description": "Siemens SINEMA Remote Connect Server\u662f\u4e00\u6b3e\u670d\u52a1\u5668\u5e94\u7528\u7a0b\u5e8f\u3002 SINEMA Remote Connect\u53ef\u5e2e\u52a9\u7528\u6237\u8bbf\u95ee\u8fdc\u7a0b\u8bbe\u5907\u6216\u673a\u5668\uff0c\u4ece\u800c\u53ef\u8f7b\u677e\u800c\u4e14\u5b89\u5168\u5730\u8fdb\u884c\u7ef4\u62a4\u3002\n\nSiemens SINEMA Remote Connect Server\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u4ee5\u901a\u8fc7\u7f51\u7edc\u8bbf\u95ee\u6613\u53d7\u653b\u51fb\u7684\u8f6f\u4ef6\u6765\u653b\u51fb\u6b64\u6f0f\u6d1e\uff0c\u65e0\u9700\u4efb\u4f55\u6743\u9650\u548c\u7528\u6237\u4ea4\u4e92\u3002",
  "discovererName": "Hendrik Derre and Tijl Deneut",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-31661",
  "openTime": "2019-09-16",
  "patchDescription": "Siemens SINEMA Remote Connect Server\u662f\u4e00\u6b3e\u670d\u52a1\u5668\u5e94\u7528\u7a0b\u5e8f\u3002 SINEMA Remote Connect\u53ef\u5e2e\u52a9\u7528\u6237\u8bbf\u95ee\u8fdc\u7a0b\u8bbe\u5907\u6216\u673a\u5668\uff0c\u4ece\u800c\u53ef\u8f7b\u677e\u800c\u4e14\u5b89\u5168\u5730\u8fdb\u884c\u7ef4\u62a4\u3002\r\n\r\nSiemens SINEMA Remote Connect Server\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u4ee5\u901a\u8fc7\u7f51\u7edc\u8bbf\u95ee\u6613\u53d7\u653b\u51fb\u7684\u8f6f\u4ef6\u6765\u653b\u51fb\u6b64\u6f0f\u6d1e\uff0c\u65e0\u9700\u4efb\u4f55\u6743\u9650\u548c\u7528\u6237\u4ea4\u4e92\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens SINEMA Remote Connect Server\u5bc6\u7801\u731c\u6d4b\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "SIEMENS SINEMA Remote Connect Server \u003c V2.0 SP1"
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf",
  "serverity": "\u9ad8",
  "submitTime": "2019-09-11",
  "title": "Siemens SINEMA Remote Connect Server\u5bc6\u7801\u731c\u6d4b\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…