SSA-928781: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 HF1
view advisory published 2024-07-09
SINEMA Remote Connect Server before V3.2 HF1 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Server and recommends to update to the latest version.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-39571US | high8.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are vulnerable to command injection due to missing server side… | ||||
| CVE-2024-39570US | high8.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are vulnerable to command injection due to missing server side… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-928781: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 HF1 - CSAF Versionself
- SSA-928781: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 HF1 - HTML Versionself
- SSA-928781: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 HF1 - PDF Versionself
- SSA-928781: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 HF1 - TXT Versionself
03
remediations (2)
- FixedSINEMA Remote Connect Server
Update to V3.2 HF1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954687/ - FixedSINEMA Remote Connect Server
Update to V3.2 HF1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954687/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan