SSA-816035: Code Execution Vulnerability in SINEMA Remote Connect Client
view advisory published 2021-08-19
The latest update for SINEMA Remote Connect Client fixes a vulnerability that could allow a local attacker to escalate privileges or even allow remote code execution under certain circumstances. Siemens has released a firmware update for SINEMA Remote Connect Client and proposes mitigations if an update is not possible.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-31338US | high7.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.0 SP1). Affected devices allow to modify configuration settings over an unauthenticated chann… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationSINEMA Remote Connect Client
Do not access links from untrusted sources
- FixedSINEMA Remote Connect Client
Update to V3.0 SP1 or later version
https://support.industry.siemens.com/cs/de/en/view/109793790/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan