CVE-2019-19296CWE-22

A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0)

Medium · published March 10, 2020

CVSS v3.1
6.8
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default ports 21/tcp and 5411/tcp) of the SiVMS/SiNVR Video

Server contain a path traversal vulnerability

that could allow an authenticated remote attacker to access and download

arbitrary files from the server, if the FTP services are enabled.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.01812 · 78.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2020-03-10T19:16Z
EPSS history
Timeline
  • 10 MAR 19:16Z
    A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0)
    cvelistv5