Description (CNA)
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains an authentication bypass vulnerability in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. A remote attacker with network access to the CCS server could exploit this vulnerability to read the CCS users database, including the passwords of all users in obfuscated cleartext.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / Control Center Server (CCS) | affected All versions < V1.5.0 |
CWE
CWE-287
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.