CVE-2019-10941

State
Published
Severity
Not scored
Published
Sep 14, 2021
Updated
Aug 4, 2024
Reserved
Apr 8, 2019

Read the record on cve.org

Description

A vulnerability has been identified in SINEMA Server (All versions < V14 SP3). Missing authentication for functionality that requires administrative user identity could allow an attacker to obtain encoded system configuration backup files. This is only possible through network access to the affected system, and successful exploitation requires no system privileges.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-306 Missing Authentication for Critical Function

Affected Products

ProductVersions
SINEMA ServerSiemens
  • All versions < V14 SP3Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.