SSA-653855: Information Disclosure vulnerability in SINEMA Remote Connect Client before V3.1 SP1
view advisory published 2024-03-12
SINEMA Remote Connect Client before V3.1 SP1 is affected by an information disclosure vulnerability. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-22045US | medium6.5 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.1 SP1). The product places sensitive information into files or directories that are accessibl… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-653855: Information Disclosure vulnerability in SINEMA Remote Connect Client before V3.1 SP1 - CSAF Versionself
- SSA-653855: Information Disclosure vulnerability in SINEMA Remote Connect Client before V3.1 SP1 - HTML Versionself
- SSA-653855: Information Disclosure vulnerability in SINEMA Remote Connect Client before V3.1 SP1 - PDF Versionself
- SSA-653855: Information Disclosure vulnerability in SINEMA Remote Connect Client before V3.1 SP1 - TXT Versionself
03
remediations (2)
- MitigationSINEMA Remote Connect Client
In order to fully mitigate the issue, administrators are advised to backup and clear the log files and to change the VPN credentials.
- FixedSINEMA Remote Connect Client
Update to V3.1 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817939/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan