SSA-381581: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1
view advisory published 2024-07-09
SINEMA Remote Connect Server before V3.2 SP1 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Server and recommends to update to the latest version.
01
describes (13)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-39876US | medium4.0 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly handle log rotation. This could allow an unauth… | ||||
| CVE-2024-39875US | medium4.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows authenticated, low privilege users with the 'Manage o… | ||||
| CVE-2024-39874US | high7.5 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against u… | ||||
| CVE-2024-39873US | high7.5 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against u… | ||||
| CVE-2024-39872US | critical9.9 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly assign rights to temporary files created d… | ||||
| CVE-2024-39871US | medium5.4OT elevated | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly separate the rights to edit device settings and… | ||||
| CVE-2024-39870US | high7.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected applications can be configured to allow users to manage own users. A loc… | ||||
| CVE-2024-39869US | medium6.5 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected products allow to upload certificates. An authenticated attacker could uploa… | ||||
| CVE-2024-39868US | high7.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain… | ||||
| CVE-2024-39867US | high7.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain… | ||||
| CVE-2024-39866US | high8.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. This could al… | ||||
| CVE-2024-39865US | high8.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. As part of th… | ||||
| CVE-2022-32260US | critical9.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application creates temporary user credentials for UMC (User Management… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-381581: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1 - CSAF Versionself
- SSA-381581: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1 - HTML Versionself
- SSA-381581: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1 - PDF Versionself
- SSA-381581: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1 - TXT Versionself
03
remediations (13)
- FixedSINEMA Remote Connect Server
Update to V3.2 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972765/ - FixedSINEMA Remote Connect Server
Update to V3.2 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972765/ - FixedSINEMA Remote Connect Server
Update to V3.2 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972765/ - FixedSINEMA Remote Connect Server
Update to V3.2 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972765/ - FixedSINEMA Remote Connect Server
Update to V3.2 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972765/ - FixedSINEMA Remote Connect Server
Update to V3.2 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972765/ - FixedSINEMA Remote Connect Server
Update to V3.2 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972765/ - FixedSINEMA Remote Connect Server
Update to V3.2 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972765/ - FixedSINEMA Remote Connect Server
Update to V3.2 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972765/ - FixedSINEMA Remote Connect Server
Update to V3.2 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972765/ - FixedSINEMA Remote Connect Server
Update to V3.2 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972765/ - FixedSINEMA Remote Connect Server
Update to V3.2 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972765/ - FixedSINEMA Remote Connect Server
Update to V3.2 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972765/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan