CRITICAL🇵🇱 Wersja polska

CVE-2024-39872

CVSS 9.3v4.0pub. 2024-07-09upd. 2024-11-21

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly assign rights to temporary files created during its update process. This could allow an authenticated attacker with the 'Manage firmware updates' role to escalate their privileges on the underlying OS level.

🇵🇱 Read Polish description →

🤖 AI Analysis

How it works

During the software update process, the application creates temporary files without properly assigning access rights (CWE-378: creation of temporary files with insecure permissions). An attacker with an account having the 'Manage firmware updates' role can manipulate these files before they are processed by the system. As a result, it is possible to obtain higher privileges at the operating system level of the host on which the application runs.

Impact

An attacker can perform privilege escalation at the operating system level, which potentially enables full takeover of the server and disruption of systems remotely managed by SINEMA Remote Connect Server.

Mitigation & patch

Siemens SINEMA Remote Connect Server must be updated to version V3.2 SP1 or newer. Detailed instructions are available in the Siemens ProductCERT security bulletin: https://cert-portal.siemens.com/productcert/html/ssa-381581.html

Who is affected

Siemens SINEMA Remote Connect Server — all versions below V3.2 SP1

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.

CVSS Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X