A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected products allow to upload certificates. An authenticated attacker could upload a crafted certificates leading to a permanent denial-of-service situation. In order to recover from such an attack, the offending certificate needs to be removed manually.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-381581.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
09 Sep 2024, 15:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert-portal.siemens.com/productcert/html/ssa-381581.html - Patch, Vendor Advisory | |
| First Time |
Siemens sinema Remote Connect Server
Siemens |
|
| CPE | cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:sinema_remote_connect_server:3.2:-:*:*:*:*:*:* cpe:2.3:a:siemens:sinema_remote_connect_server:3.2:hf1:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
09 Jul 2024, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-09 12:15
Updated : 2024-09-09 15:20
NVD link : CVE-2024-39869
Mitre link : CVE-2024-39869
JSON object : View
Products Affected
siemens
- sinema_remote_connect_server
CWE