Description (CNA)
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server (CCS) does not properly limit its capabilities to the specified purpose. In conjunction with CVE-2019-18341, an unauthenticated remote attacker with network access to the CCS server could exploit this vulnerability to read or delete arbitrary files, or access other resources on the same server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / Control Center Server (CCS) | affected All versions < V1.5.0 |
CWE
CWE-749
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
ADP enrichment
No English description supplied.