ByteOS Network

NVD Vulnerability Details :

CVE-2019-19277

Analyzed

Source-productcert@siemens.com

Published At-10 Mar, 2020 | 20:15

Updated At-03 Nov, 2021 | 18:43

A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service users") with administrative privileges that could enable a remote authenticated attacker to perform actions that are not visible to other users of the system, such as granting persons access to a secured area.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Primary	2.0	5.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:N

CPE Matches

Siemens AG

>>siport_mp>>Versions before 3.1.4(exclusive)

cpe:2.3:a:siemens:siport_mp:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov
CWE-778	Secondary	productcert@siemens.com

References

Hyperlink	Source	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-978558.pdf	productcert@siemens.com	Vendor Advisory
https://www.us-cert.gov/ics/advisories/icsa-20-042-08	productcert@siemens.com	Third Party Advisory US Government Resource

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History