Input Validation Flaw in XHQ Web Interface by Siemens

CVE-2019-13931

Summary

A vulnerability has been identified in Siemens XHQ web interface, which allows an attacker to manipulate input in an unexpected form. This flaw requires the attacker to be authenticated to the web interface, leading to potentially erratic behavior of the application for genuine users. Successful exploitation may enable the attacker to alter the contents of the web application, causing significant risks to data integrity and confidentiality. At the time of the advisory publication, there was no evidence of public exploitation of this vulnerability.

References