{"id":"CVE-2019-6570","aliases":["EUVD-2019-16129","GHSA-qp82-v7w8-wfwq"],"status":"published","title":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V2.0). Due to...","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01326,"percentile":0.71184,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-280","CWE-863"],"published":"2019-04-17T13:40:24Z","modified":"2026-06-17T02:39:17Z","products":[{"vendor":"siemens","product":"sinema remote connect server"},{"vendor":"siemens","product":"sinema_remote_connect_server"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6570"},{"url":"https://github.com/advisories/GHSA-qp82-v7w8-wfwq"}],"sources":{"cve":[{"id":"CVE-2019-6570","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.","status":"published","published":"2019-04-17T13:40:24Z","modified":"2024-08-04T20:23:22.082Z","cwes":["CWE-280"],"updated_at":"2026-11-02T14:20:23.697579Z"}],"euvd":[{"id":"EUVD-2019-16129","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.","status":"published","published":"2019-04-17T13:40:24Z","modified":"2024-08-04T20:23:22Z","updated_at":"2026-11-03T03:06:49.204502Z"}],"ghsa":[{"id":"GHSA-qp82-v7w8-wfwq","title":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V2.0). Due to...","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.","status":"published","published":"2022-05-13T01:11:25Z","modified":"2023-02-01T05:03:36Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-280"],"updated_at":"2026-11-02T14:50:05.01868Z"}],"nvd":[{"id":"CVE-2019-6570","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.","status":"published","published":"2019-04-17T14:29:03.73Z","modified":"2026-06-17T02:39:17.167Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-280","CWE-863"],"updated_at":"2026-11-02T14:05:11.426883Z"}]}}