SSA-292794: Multiple Denial-of-Service Vulnerabilities in SINEMA Remote Connect Server
view advisory published 2021-04-13
The latest update for SINEMA Remote Connect Server fixes two Denial-of-Service vulnerabilities in the underlying third-party XML parser. Siemens has released updates for the affected product and recommends to update to the latest versions.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-7595US | high7.5 | — | ||
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. | ||||
| CVE-2019-19956US | high7.5 | — | ||
xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs. | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-292794: Multiple Denial-of-Service Vulnerabilities in SINEMA Remote Connect Server - CSAF Versionself
- SSA-292794: Multiple Denial-of-Service Vulnerabilities in SINEMA Remote Connect Server - PDF Versionself
- SSA-292794: Multiple Denial-of-Service Vulnerabilities in SINEMA Remote Connect Server - TXT Versionself
03
remediations (2)
- FixedSINEMA Remote Connect Server
Update to V3.0
https://support.industry.siemens.com/cs/ww/en/view/109793790 - FixedSINEMA Remote Connect Server
Update to V3.0
https://support.industry.siemens.com/cs/ww/en/view/109793790
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan