A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with administrative privileges.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-381581.html | Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
09 Sep 2024, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Siemens sinema Remote Connect Server
Siemens |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CWE | NVD-CWE-Other | |
| References | () https://cert-portal.siemens.com/productcert/html/ssa-381581.html - Patch, Third Party Advisory | |
| CPE | cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:sinema_remote_connect_server:3.2:-:*:*:*:*:*:* cpe:2.3:a:siemens:sinema_remote_connect_server:3.2:hf1:*:*:*:*:*:* |
09 Jul 2024, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-09 12:15
Updated : 2024-09-09 15:18
NVD link : CVE-2024-39866
Mitre link : CVE-2024-39866
JSON object : View
Products Affected
siemens
- sinema_remote_connect_server
CWE