Siemens SINEMA
SINEMA Remote Connect Client before V3.2 SP2 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Client and recommends to update to the latest version.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-42344US | medium5.5 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive information into a log file which is reada… | ||||
| CVE-2024-32006US | medium6.5 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application does not expire the user session on reboot without logout. T… | ||||
| CVE-2024-2466US | — | — | ||
libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hos… | ||||
| CVE-2024-2398US | — | — | ||
When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts t… | ||||
| CVE-2024-2379US | — | — | ||
libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path… | ||||
| CVE-2024-2004US | —OT elevated | — | ||
When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic… | ||||
| CVE-2023-46850US | critical9.8 | — | ||
Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer. | ||||
references
External citations — patches, advisories, analysis.
- SSA-417159: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP2 - CSAF Versionself
- SSA-417159: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP2 - HTML Versionself
- ICS Advisory ICSA-24-256-10 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-256-10 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationSINEMA Remote Connect Client
Instead of using the TOTP-based two-factor authentication mechanism, consider login with Smartcard/User certificate
- FixedSINEMA Remote Connect Client
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/ - FixedSINEMA Remote Connect Client
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/ - FixedSINEMA Remote Connect Client
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/ - FixedSINEMA Remote Connect Client
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/ - FixedSINEMA Remote Connect Client
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/ - FixedSINEMA Remote Connect Client
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/ - FixedSINEMA Remote Connect Client
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan