CVE-2019-6580
A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a),…
- Published
- Updated
- Reserved
- Assigned by
- siemens
Description
A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), Siveillance VMS 2018 R2 (All versions < V12.2a), Siveillance VMS 2018 R3 (All versions < V12.3a), Siveillance VMS 2019 R1 (All versions < V13.1a). An attacker with network access to port 80/TCP could change device properties without authorization. No user interaction is required to exploit this security vulnerability. Successful exploitation compromises confidentiality, integrity and availability of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 1.7% · top 23% of all CVEs (5 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.
Weakness
Affected products
Siemens AG · Siveillance VMS 2017 R2
- affected All versions < V11.2a
Siemens AG · Siveillance VMS 2018 R1
- affected All versions < V12.1a
Siemens AG · Siveillance VMS 2018 R2
- affected All versions < V12.2a
Siemens AG · Siveillance VMS 2018 R3
- affected All versions < V12.3a
Siemens AG · Siveillance VMS 2019 R1
- affected All versions < V13.1a
References (2)
- https://cert-portal.siemens.com/productcert/pdf/ssa-212009.pdf (opens in a new tab)x_refsource_MISCx_transferred
- https://ics-cert.us-cert.gov/advisories/ICSA-19-162-01 (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2019-6580)Record last updated .