CVE-2019-19292CWE-89

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0)

High · published March 10, 2020

CVSS v3.1
8.8
EPSS
2%
Percentile
80.6
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains an SQL injection

vulnerability in its XML-based communication protocol as provided by default

on ports 5444/tcp and 5440/tcp.

An authenticated remote attacker could exploit this vulnerability to

read or modify the CCS database and potentially execute administrative

database operations or operating system commands.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.01999 · 80.6th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2020-03-10T19:16Z
EPSS history
Timeline
  • 10 MAR 19:16Z
    A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0)
    cvelistv5