CVE-2019-18341CWE-287

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0)

Medium · published December 12, 2019

CVSS v3.1
5.3
EPSS
2%
Percentile
75.8
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server

(CCS) contains an authentication bypass vulnerability.

A remote attacker with network access to the CCS server could

exploit this vulnerability to read data from the EDIR directory

(for example, the list of all configured stations).

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.01618 · 75.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2019-12-12T19:08Z
EPSS history
Timeline
  • 12 DEC 19:08Z
    A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0)
    cvelistv5