CVE-2019-19295CWE-778

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0)

Medium · published March 10, 2020

CVSS v3.1
4.3
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) does not enforce logging of

security-relevant activities in its XML-based communication protocol

as provided by default on ports 5444/tcp and 5440/tcp.

An authenticated remote attacker could exploit this vulnerability to

perform covert actions that are not visible in the application log.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.01054 · 64.1th percentile
Weakness
CWE-778 · Insufficient Logging
Published
2020-03-10T19:16Z
EPSS history
Timeline
  • 10 MAR 19:16Z
    A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0)
    cvelistv5