Auth bypass in Siemens Siveillance_video_management_software_2017_r2
CVE-2019-6580
A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), Siveillance VMS 2018 R2 (All versions < V12.2a), Siveillance VMS 2018 R3 (All versions < V12.3a), Sive…
Vulnerability class: Broken Access Control
EPSS: 0.017 (74.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Siemens Siveillance_video_management_software_2017_r2
- Siemens Siveillance_video_management_software_2018_r1
- Siemens Siveillance_video_management_software_2018_r2
- Siemens Siveillance_video_management_software_2018_r3
- Siemens Siveillance_video_management_software_2019_r1
- Siemens Ag Siveillance Vms 2017 R2 — versions All versions < V11.2a
- Siemens Ag Siveillance Vms 2018 R1 — versions All versions < V12.1a
- Siemens Ag Siveillance Vms 2018 R2 — versions All versions < V12.2a
- Siemens Ag Siveillance Vms 2018 R3 — versions All versions < V12.3a
- Siemens Ag Siveillance Vms 2019 R1 — versions All versions < V13.1a
Weakness classification (CWE)
References
- productcert@siemens.com (Patch, x_refsource_MISC, Vendor Advisory)
- productcert@siemens.com (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-6580?
- CVE-2019-6580 is a critical-severity vulnerability in Siemens Siveillance_video_management_software_2017_r2, classified under Missing Authorization. CVSS score: 9.8/10. Published 2019-06-12.
- How severe is CVE-2019-6580?
- Critical severity. CVSS v3 base score is 9.8 out of 10.