ICSA-20-070-01_Siemens and PKE SiNVR/SiVMS Video Server (Update B)

CVEs (12)

Remediations

• Apply ACL/firewall configuration on the CCS server to ensure that only legitimate systems are able to access the configured CCS server ports. Harden the CCS server accordingly to prevent unauthorized access. Consider to apply encryption and authentication on the network (e.g., via TLS on application level or via IPSec on host level).
• Update to V1.5.0 or later version
• CVE-2019-18340: Harden the CCS server to prevent local access by unauthorized users
• Currently no fix is planned
• CVE-2019-19290, CVE-2019-19293, CVE-2019-19294: Disable the web interface of CCS if not used. Alternatively, restrict access from localhost only, or only to trusted hosts of CCS administrators. Enable TLS for the web interface of CCS.
• CVE-2019-19291: Disable the FTP service of the CCS

Affected Vendors

Affected Products (2)

Affected Sectors

Multiple