CVE-2019-10940

A vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1). Incorrect session validation could allow an attacker with a valid session, with low privileges, to perform firmware updates and other administrative operations on connected devices. The security vulnerability could be exploited by an attacker with network access to the affected system. An attacker must have access to a low privileged account in order to exploit the vulnerability. An attacker could use the vulnerability to compromise confidentiality, integrity, and availability of the affected system and underlying components. At the time of advisory publication no public exploitation of this security vulnerability was known.

• CWE-266
• CWE-269

• https://cert-portal.siemens.com/productcert/pdf/ssa-880233.pdfVendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-20-014-02Third Party Advisory, US Government Resource
• https://cert-portal.siemens.com/productcert/pdf/ssa-880233.pdfVendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-20-014-02Third Party Advisory, US Government Resource

Published

Jan 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10935A vulnerability has been identified in SIMATIC PCS 7 V8.0 an…
• CVE-2019-10936Affected devices improperly handle large amounts of speciall…7.5
• CVE-2019-10937A vulnerability has been identified in SIMATIC TDC CP51M1 (A…7.5
• CVE-2019-10938A vulnerability has been identified in SIPROTEC 5 devices wi…9.8
• CVE-2019-10939A vulnerability has been identified in TIM 3V-IE (incl. SIPL…9.8
• CVE-2019-1094An information disclosure vulnerability exists when the Wind…
• CVE-2019-10941A vulnerability has been identified in SINEMA Server (All ve…5.3
• CVE-2019-10942A vulnerability has been identified in SCALANCE X-200 switch…8.6
• CVE-2019-10943A vulnerability has been identified in SIMATIC Drive Control…7.5
• CVE-2019-10945An issue was discovered in Joomla! before 3.9.5. The Media M…
• CVE-2019-10946An issue was discovered in Joomla! before 3.9.5. The "refres…
• CVE-2019-10947Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Ve…7.8