SSA-334944: Vulnerability in SINEMA Remote Connect Server
Multiple vulnerabilities in SINEMA Remote Connect Server could allow an unauthorized remote attacker to retrieve or manipulate sensitive information from the affected software. In addition, the attacker could also cause a Denial-of-Service condition in devices controlled by the affected software. Siemens has released an update for the SINEMA Remote Connect Server and recommends to update to the latest version.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-37193US | medium4.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected system could manipula… | ||||
| CVE-2021-37192US | medium4.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an… | ||||
| CVE-2021-37191US | medium4.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected system could brute fo… | ||||
| CVE-2021-37190US | medium4.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an… | ||||
| CVE-2021-37183US | medium6.5 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software allows sending send-to-sleep notifications to the managed devic… | ||||
| CVE-2021-37177US | medium6.5 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The status provided by the syslog clients managed by the affected software can be man… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- FixedSINEMA Remote Connect Server
Update to V3.0 SP2 or later version
https://support.industry.siemens.com/cs/de/en/view/109793790/ - FixedSINEMA Remote Connect Server
Update to V3.0 SP2 or later version
https://support.industry.siemens.com/cs/de/en/view/109793790/ - FixedSINEMA Remote Connect Server
Update to V3.0 SP2 or later version
https://support.industry.siemens.com/cs/de/en/view/109793790/ - FixedSINEMA Remote Connect Server
Update to V3.0 SP2 or later version
https://support.industry.siemens.com/cs/de/en/view/109793790/ - FixedSINEMA Remote Connect Server
Update to V3.0 SP2 or later version
https://support.industry.siemens.com/cs/de/en/view/109793790/ - FixedSINEMA Remote Connect Server
Update to V3.0 SP2 or later version
https://support.industry.siemens.com/cs/de/en/view/109793790/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan