ICSA-19-260-02 Siemens SINEMA Remote Connect Server
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-13922US | low2.7OT elevated | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). An attacker with administrative privileges can obtain the hash of a connected device'… | ||||
| CVE-2019-13920US | medium4.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some parts of the web application are not protected against Cross Site Request Forger… | ||||
| CVE-2019-13919US | medium4.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some pages that should only be accessible by a privileged user can also be accessed b… | ||||
| CVE-2019-13918US | critical9.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). The web interface has no means to prevent password guessing attacks. The vulnerabilit… | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- MitigationSINEMA Remote Connect Server
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:Remote Connect Do not access links from untrusted sources while logged in at SINEMA
- MitigationSINEMA Remote Connect Server
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:Remote Connect Do not access links from untrusted sources while logged in at SINEMA
- MitigationSINEMA Remote Connect Server
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:Remote Connect Do not access links from untrusted sources while logged in at SINEMA
- MitigationSINEMA Remote Connect Server
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:Remote Connect Do not access links from untrusted sources while logged in at SINEMA
- FixedSINEMA Remote Connect Server
Update to V2.0 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109770899
https://support.industry.siemens.com/cs/ww/en/view/109770899 - FixedSINEMA Remote Connect Server
Update to V2.0 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109770899
https://support.industry.siemens.com/cs/ww/en/view/109770899 - FixedSINEMA Remote Connect Server
Update to V2.0 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109770899
https://support.industry.siemens.com/cs/ww/en/view/109770899 - FixedSINEMA Remote Connect Server
Update to V2.0 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109770899
https://support.industry.siemens.com/cs/ww/en/view/109770899
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan