A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSiemens Sinema Remote Connect Server
APPSiemens< 2.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2021-40438CRITICAL9.0⚠ KEVPL ✓same product
SSRF w mod_proxy Apache HTTP Server — przekierowanie żądań przez atakującego
CVE-2024-39872CRITICAL9.3PL ✓same product
Privilege escalation w SINEMA Remote Connect Server przez tymczasowe pliki aktualizacji
CVE-2022-32257CRITICAL9.8PL ✓same product
Siemens SINEMA Remote Connect Server — brak kontroli dostępu prowadzący do RCE
CVE-2022-25315CRITICAL9.8PL ✓same product
Integer overflow w libexpat (storeRawNames) — RCE bez uwierzytelnienia
CVE-2022-25235CRITICAL9.8PL ✓same product
Brak walidacji kodowania UTF-8 w bibliotece Expat (libexpat)