CVE-2019-13918

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-09-13 · updated 2026-06-17
Weakness: CWE-307

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). The web interface has no means to prevent password guessing attacks. The vulnerability could be exploited by an attacker with network access to the vulnerable software, requiring no privileges and no user interaction. The vulnerability could allow full access to the web interface. At the time of advisory publication no public exploitation of this security vulnerability was known.

Affected products

Siemens SINEMA Remote Connect Server: before 2.0; 2.0, 2.0-hf1 — fixed in 2.0

How to fix

Upgrade to a fixed version: Siemens SINEMA Remote Connect Server 2.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-13918 or the next vulnerability affects your stack