Description (CNA)
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0 < V5.0.2), SiNVR/SiVMS Video Server (All versions >= V5.0.2). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server applies weak cryptography when exposing device (camera) passwords. This could allow an unauthenticated remote attacker to read and decrypt the passwords and conduct further attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / SiNVR/SiVMS Video Server | affected All versions < V5.0.0 |
| Siemens / SiNVR/SiVMS Video Server | affected All versions >= V5.0.0 < V5.0.2 |
| Siemens / SiNVR/SiVMS Video Server | affected All versions >= V5.0.2 |
CWE
CWE-326
References
ADP enrichment
No English description supplied.