Siemens AG SINEMA Remote Connect Server

Name: Siemens AG SINEMA Remote Connect Server
Brand: Siemens AG

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical8high7medium1low

updated 2026-10-28

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	no fix	2024-07-01	≤ 3.2 SP2
CVE-2019-11477US	high7.5	98.7% (100th)	Exploit	no fix	2019-06-19	≤ 2.0 SP1
CVE-2019-11478US	high7.5	94.7% (100th)	—	no fix	2019-06-19	≤ 2.0 SP1
CVE-2019-11479US	high7.5	91.7% (100th)	—	no fix	2019-06-19	≤ 2.0 SP1
CVE-2021-20093US	critical9.1	33.3% (98th)	—	no fix	2021-06-16	≤ 3.0 SP2
CVE-2021-41991US	high7.5	5.30% (93rd)	—	no fix	2021-10-18	≤ 3.1
CVE-2022-23102US	medium6.1	4.72% (92nd)	—	no fix	2022-02-09	≤ 2.0
CVE-2019-13918US	critical9.8	1.51% (74th)	—	V2.0 SP1	2019-09-13	2 versions
CVE-2022-32257US	critical9.8	0.84% (58th)	—	no fix	2024-03-12	≤ 3.2
CVE-2019-13919US	medium4.3	0.83% (57th)	—	V2.0 SP1	2019-09-13	All versions → V2.0 SP1
CVE-2019-13922US	low2.7OT elevated	0.55% (46th)	—	V2.0 SP1	2019-09-13	2 versions
CVE-2024-39872US	critical9.9	0.47% (41st)	—	no fix	2024-07-09	≤ 3.2 SP1
CVE-2024-39873US	high7.5	0.45% (38th)	—	no fix	2024-07-09	≤ 3.2 SP1
CVE-2019-13920US	medium4.3	0.43% (37th)	—	V2.0 SP1	2019-09-13	All versions → V2.0 SP1
CVE-2024-39874US	high7.5	0.41% (35th)	—	no fix	2024-07-09	≤ 3.2 SP1
CVE-2024-39869US	medium6.5	0.28% (20th)	—	no fix	2024-07-09	≤ v3.2 SP1
CVE-2024-39875US	medium4.3	0.26% (18th)	—	no fix	2024-07-09	≤ 3.2 SP1
CVE-2025-40819US	—OT elevated	0.25% (16th)	—	no fix	2025-12-09	≤ 3.2 SP4
CVE-2024-39870US	high7.8	0.25% (16th)	—	no fix	2024-07-09	≤ 3.2 SP1
CVE-2024-39871US	medium5.4OT elevated	0.22% (13th)	—	no fix	2024-07-09	≤ 3.2 SP1
CVE-2024-39876US	medium4.0	0.21% (11th)	—	no fix	2024-07-09	≤ 3.2 SP1
CVE-2025-40818US	—	0.10% (1st)	—	no fix	2025-12-09	≤ 3.2 SP4

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-307Improper Restriction of Excessive Authentication Attempts4 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-125Out-of-bounds Read1 CVEs

sources (2)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)20 CVEs
EUEU Vulnerability Database (ENISA)4 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan