CVE-2019-19299

HIGH 7.5CVE-2019-19299 · Published 10/03/2020 · updated 17/06/2026

In short

CVE-2019-19299 is a HIGH (CVSS 7.5) vulnerability affecting sinvr/sivms video server (siemens).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sinvr/sivms video server siemens	`≤ 5.0.2`	No fix yet

Description

A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0 < V5.0.2), SiNVR/SiVMS Video Server (All versions >= V5.0.2). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server applies weak cryptography when exposing device (camera) passwords. This could allow an unauthenticated remote attacker to read and decrypt the passwords and conduct further attacks.

References

cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf · Mitigation

More vulnerabilities in sinvr/sivms video server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free