Siemens SINEMA Remote Connect Server
view advisory published 2024-03-12
SINEMA Remote Connect Server before V3.2 is affected by multiple vulnerabilities. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-32257US | critical9.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web service that lacks proper access control for s… | ||||
| CVE-2020-23064US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11023. Reason: This candidate is a duplicate of CVE-2020-11023. Notes: All CVE users should reference CVE-20… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-576771: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 - CSAF Versionself
- SSA-576771: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 - HTML Versionself
- SSA-576771: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 - PDF Versionself
- SSA-576771: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 - TXT Versionself
- ICS Advisory ICSA-24-074-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-074-03 - Web Versionself
- Recommended Practicesexternal
03
remediations (2)
- FixedSINEMA Remote Connect Server
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811169/ - FixedSINEMA Remote Connect Server
Update to V3.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109826375/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan