CVE-2019-6570

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.

• CWE-280
• CWE-863

• https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdfPatch, Vendor Advisory

Published

Apr 17, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6564GE Communicator, all versions prior to 4.0.517, allows a non…7.8
• CVE-2019-6565Moxa IKS and EDS fails to properly validate user input, givi…6.1
• CVE-2019-6566GE Communicator, all versions prior to 4.0.517, allows a non…7.8
• CVE-2019-6567A vulnerability has been identified in SCALANCE X-200 switch…5.5
• CVE-2019-6568The webserver of the affected devices contains a vulnerabili…7.5
• CVE-2019-6569The monitor barrier of the affected products insufficiently …9.1
• CVE-2019-6571A vulnerability has been identified in SIEMENS LOGO!8 (6ED10…7.5
• CVE-2019-6572A vulnerability has been identified in SIMATIC HMI Comfort P…9.1
• CVE-2019-6574A vulnerability has been identified in SINAMICS PERFECT HARM…7.5
• CVE-2019-6575A vulnerability has been identified in SIMATIC CP 443-1 OPC …7.5
• CVE-2019-6576A vulnerability has been identified in SIMATIC HMI Comfort P…6.5
• CVE-2019-6577A vulnerability has been identified in SIMATIC HMI Comfort P…