CVE-2019-10941

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-09-14 · updated 2026-06-17
Weakness: CWE-306

Description

A vulnerability has been identified in SINEMA Server (All versions < V14 SP3). Missing authentication for functionality that requires administrative user identity could allow an attacker to obtain encoded system configuration backup files. This is only possible through network access to the affected system, and successful exploitation requires no system privileges.

Affected products

Siemens SINEMA Server V14: before 14.0; 14.0, 14.0-sp1, 14.0-sp2 — fixed in 14.0

How to fix

Upgrade to a fixed version: Siemens SINEMA Server V14 14.0. Check the vendor advisory for mitigations.

References

https://cert-portal.siemens.com/productcert/pdf/ssa-835377.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-835377.pdf

Get alerted when CVE-2019-10941 or the next vulnerability affects your stack