CVE-2019-19291CWE-313

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0)

Medium · published March 10, 2020

CVSS v3.1
5.3
EPSS
1%
Percentile
54.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). The FTP services of the SiVMS/SiNVR Video Server and the Control Center Server (CCS) maintain

log files that store login credentials in cleartext.

In configurations where the FTP service is enabled, authenticated remote

attackers could extract login credentials of other users of the service.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00749 · 54.4th percentile
Weakness
CWE-313 · Cleartext Storage in a File or on Disk
Published
2020-03-10T19:16Z
EPSS history
Timeline
  • 10 MAR 19:16Z
    A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0)
    cvelistv5