File System Exposure in XHQ by Siemens
CVE-2019-19287

6.5MEDIUM

Key Information:

Vendor
Siemens
Status
Xhq
Vendor
CVE Published:
14 December 2020

Summary

The vulnerability in XHQ affects all versions prior to 6.1 and allows attackers to exploit the web interface to traverse the server's file system. By sending specially crafted packets over the network, attackers can gain unauthorized access to sensitive files without the need for authentication, posing significant security risks to the system in use.

Affected Version(s)

XHQ All Versions < 6.1

References

https://cert-portal.siemens.com/productcert/pdf/ssa-71269...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.