CVE-2019-13931

Medium

Description

A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web interface could allow for an an attacker to craft the input in a form that is not expected, causing the application to behave in unexpected ways for legitimate users. Successful exploitation requires for an attacker to be authenticated to the web interface. A successful attack could cause the application to have unexpected behavior. This could allow the attacker to modify contents of the web application. At the time of advisory publication no public exploitation of this security vulnerability was known.

SeverityMedium
CVSS5.4
Exploit probability—
ProductSiemens Xhq
PublishedDec 12, 2019
First seenDec 12, 2019
Weakness typeCWE-80CWE-80

How to fix

Update
  • siemens xhq6.0.0.2 or later

Affected products

ProductAffected versionsFixed in
siemens xhqv < 6.0.0.26.0.0.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.