ZeroHour

CVE-2019-6570

CVSS 3.1
8.8 high
EPSS
1%p69
Published
()
Modified
Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.

Vendors
siemens
Products
sinema remote connect server
Weakness
CWE-280, CWE-863
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.