A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application creates temporary user credentials for UMC (User Management Component) users. An attacker could use these temporary credentials for authentication bypass in certain scenarios.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:HSiemens Sinema Remote Connect Server
APPSiemens< 3.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
Related vulnerabilities
CVE-2021-40438CRITICAL9.0⚠ KEVPL ✓same product
SSRF w mod_proxy Apache HTTP Server — przekierowanie żądań przez atakującego
CVE-2024-39872CRITICAL9.3PL ✓same product
Privilege escalation w SINEMA Remote Connect Server przez tymczasowe pliki aktualizacji
CVE-2022-32257CRITICAL9.8PL ✓same product
Siemens SINEMA Remote Connect Server — brak kontroli dostępu prowadzący do RCE
CVE-2022-25315CRITICAL9.8PL ✓same product
Integer overflow w libexpat (storeRawNames) — RCE bez uwierzytelnienia
CVE-2022-25235CRITICAL9.8PL ✓same product
Brak walidacji kodowania UTF-8 w bibliotece Expat (libexpat)