Auth bypass in Siemens Siveillance_video_management_software_2017_r2
CVE-2019-6582
A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), Siveillance VMS 2018 R2 (All versions < V12.2a), Siveillance VMS 2018 R3 (All versions < V12.3a), Sive…
EPSS: 0.011 (60.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L.
Affected products
- Siemens Siveillance_video_management_software_2017_r2
- Siemens Siveillance_video_management_software_2018_r1
- Siemens Siveillance_video_management_software_2018_r2
- Siemens Siveillance_video_management_software_2018_r3
- Siemens Siveillance_video_management_software_2019_r1
- Siemens Ag Siveillance Vms 2017 R2 — versions All versions < V11.2a
- Siemens Ag Siveillance Vms 2018 R1 — versions All versions < V12.1a
- Siemens Ag Siveillance Vms 2018 R2 — versions All versions < V12.2a
- Siemens Ag Siveillance Vms 2018 R3 — versions All versions < V12.3a
- Siemens Ag Siveillance Vms 2019 R1 — versions All versions < V13.1a
Weakness classification (CWE)
References
- productcert@siemens.com (Patch, x_refsource_MISC, Vendor Advisory)
- productcert@siemens.com (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-6582?
- CVE-2019-6582 is a high-severity vulnerability in Siemens Siveillance_video_management_software_2017_r2, classified under Improper Authorization. CVSS score: 7.1/10. Published 2019-06-12.
- How severe is CVE-2019-6582?
- High severity. CVSS v3 base score is 7.1 out of 10.