Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:sinvr/sivms_video_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSinvr/Sivms Video Server (65a9b281-34c9-5018-975f-e7656e3e1fc6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-19299 vulnerable 2026-06-08 05:13:21.935208 Details available
HIGH (7.5)
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0 < V5.0.2), SiNVR/SiVMS Video Server (All versions >= V5.0.2). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server applies weak cryptography when exposing device (camera) passwords. This could allow an unauthenticated remote attacker to read and decrypt the passwords and conduct further attacks.
Published: 2020-03-10T19:16:17.000Z
Updated: 2024-08-05T02:16:46.835Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19298 vulnerable 2026-06-08 05:13:21.931664 Details available
HIGH (7.5)
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0 < V5.0.2). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server contains a input validation vulnerability, that could allow an unauthenticated remote attacker to cause a Denial-of-Service condition by sending malformed HTTP requests.
Published: 2020-03-10T19:16:17.000Z
Updated: 2024-08-05T02:16:46.883Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19297 vulnerable 2026-06-08 05:13:21.931230 Details available
HIGH (7.5)
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server contains a path traversal vulnerability, that could allow an unauthenticated remote attacker to access and download arbitrary files from the server.
Published: 2020-03-10T19:16:17.000Z
Updated: 2024-08-05T02:09:39.655Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19296 vulnerable 2026-06-08 05:13:21.930872 Details available
MEDIUM (6.8)
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default ports 21/tcp and 5411/tcp) of the SiVMS/SiNVR Video Server contain a path traversal vulnerability that could allow an authenticated remote attacker to access and download arbitrary files from the server, if the FTP services are enabled.
Published: 2020-03-10T19:16:17.000Z
Updated: 2024-08-05T02:09:39.625Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19291 vulnerable 2026-06-08 05:13:21.928425 Details available
MEDIUM (5.3)
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). The FTP services of the SiVMS/SiNVR Video Server and the Control Center Server (CCS) maintain log files that store login credentials in cleartext. In configurations where the FTP service is enabled, authenticated remote attackers could extract login credentials of other users of the service.
Published: 2020-03-10T19:16:17.000Z
Updated: 2024-08-05T02:09:39.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18340 vulnerable 2026-06-08 05:13:11.415382 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18339 vulnerable 2026-06-08 05:13:11.414774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.