SSA-417159: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP2
SINEMA Remote Connect Client before V3.2 SP2 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Client and recommends to update to the latest version.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-42344US | medium5.5 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive information into a log file which is reada… | ||||
| CVE-2024-32006US | medium6.5 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application does not expire the user session on reboot without logout. T… | ||||
| CVE-2024-2466US | — | — | ||
libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hos… | ||||
| CVE-2024-2398US | — | — | ||
When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts t… | ||||
| CVE-2024-2379US | — | — | ||
libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path… | ||||
| CVE-2024-2004US | —OT erhöht | — | ||
When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic… | ||||
| CVE-2023-46850US | critical9.8 | — | ||
Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (8)
- MitigationSINEMA Remote Connect Client
Instead of using the TOTP-based two-factor authentication mechanism, consider login with Smartcard/User certificate
- BehobenSINEMA Remote Connect Client
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/ - BehobenSINEMA Remote Connect Client
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/ - BehobenSINEMA Remote Connect Client
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/ - BehobenSINEMA Remote Connect Client
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/ - BehobenSINEMA Remote Connect Client
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/ - BehobenSINEMA Remote Connect Client
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/ - BehobenSINEMA Remote Connect Client
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan