CVE-2019-19277

A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service users") with administrative privileges that could enable a remote authenticated attacker to perform actions that are not visible to other users of the system, such as granting persons access to a secured area.

• CWE-778

• https://cert-portal.siemens.com/productcert/pdf/ssa-978558.pdfVendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-20-042-08Third Party Advisory, US Government Resource
• https://cert-portal.siemens.com/productcert/pdf/ssa-978558.pdfVendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-20-042-08Third Party Advisory, US Government Resource

Published

Mar 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19271An issue was discovered in tls_verify_crl in ProFTPD before …7.5
• CVE-2019-19272An issue was discovered in tls_verify_crl in ProFTPD before …7.5
• CVE-2019-19273On Samsung mobile devices with O(8.0) and P(9.0) software an…7.8
• CVE-2019-19274typed_ast 1.3.0 and 1.3.1 has a handle_keywordonly_args out-…7.5
• CVE-2019-19275typed_ast 1.3.0 and 1.3.1 has an ast_for_arguments out-of-bo…7.5
• CVE-2019-19276A vulnerability has been identified in SIMATIC HMI Comfort P…5.3
• CVE-2019-19278A vulnerability has been identified in SINAMICS PERFECT HARM…6.8
• CVE-2019-19279A vulnerability has been identified in SIPROTEC 4 and SIPROT…7.5
• CVE-2019-1928Multiple vulnerabilities in Cisco Webex Network Recording Pl…7.8
• CVE-2019-19281A vulnerability has been identified in SIMATIC ET 200SP Open…7.5
• CVE-2019-19282A vulnerability has been identified in OpenPCS 7 V8.1 (All v…7.5
• CVE-2019-19283A vulnerability has been identified in XHQ (All Versions < 6…5.3