CVE-2019-18342

CVSS v3 9.9 CRITICAL
CVSS v2.0 7.5 HIGH

9.9^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.1 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

A

vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server (CCS) does not properly limit its capabilities to the specified purpose. In conjunction with CVE-2019-18341, an unauthenticated remote attacker with network access to the CCS server could exploit this vulnerability to read or delete arbitrary files, or access other resources on the same server.

References

Link	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf	Not Applicable Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf	Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf	Not Applicable Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:siemens:control_center_server:*:*:*:*:*:*:*:*

History

21 Nov 2024, 04:33

Type	Values Removed	Values Added
References	~~() https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf - Not Applicable, Vendor Advisory~~	() https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf - Not Applicable, Vendor Advisory
References	~~() https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf - Vendor Advisory~~	() https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf - Vendor Advisory

Information

Published : 2019-12-12 19:15

Updated : 2024-11-21 04:33

NVD link : CVE-2019-18342

Mitre link : CVE-2019-18342

CVE.ORG link : CVE-2019-18342

JSON object : View

Products Affected

control_center_server

CWE

CWE-749

Exposed Dangerous Method or Function

NVD-CWE-Other

{"id": "CVE-2019-18342", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "[email protected]", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.1}, {"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2019-12-12T19:15:20.763", "references": [{"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf", "tags": ["Not Applicable", "Vendor Advisory"], "source": "[email protected]"}, {"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf", "tags": ["Not Applicable", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-749"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server\n(CCS) does not properly limit its capabilities to the specified purpose.\n\nIn conjunction with CVE-2019-18341, an unauthenticated remote attacker with\nnetwork access to the CCS server could exploit this vulnerability\nto read or delete arbitrary files, or access other resources on the same\nserver."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en Control Center Server (CCS) (Todas las versiones anteriores a V1.5.0). El servicio SFTP (puerto predeterminado 22/tcp) del Servidor de Control Center (CCS) no limita adecuadamente sus capacidades al prop\u00f3sito especificado. Junto con CVE-2019-18341, un atacante remoto no autenticado con acceso a la red del servidor CCS podr\u00eda explotar esta vulnerabilidad para leer o eliminar archivos arbitrarios, o acceder a otros recursos en el mismo servidor"}], "lastModified": "2024-11-21T04:33:05.120", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:siemens:control_center_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78E0586D-D26D-4362-BECA-73996052C3FE", "versionEndExcluding": "1.5.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}