CVE-2019-13919

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0 SP1. Some pages that should only be accessible by a privileged user can also be accessed by a non-privileged user. The security vulnerability could be exploited by an attacker with network access and valid...

CVE-2019-13918

The CVE-2019-13918 issue affects Siemens SINEMA Remote Connect Server (all versions

CVE-2019-13919

Siemens SINEMA Remote Connect Server (all versions

CVE-2019-13920

Siemens SINEMA Remote Connect Server, pre-2.0 SP1, has a Cross‑Site Request Forgery (CSRF) vulnerability in the web interface that could allow an attacker to trigger requests from a logged‑in user and switch the connectivity state of a user or device. Root cause: CSRF in the web application (CVE-...

CVE-2019-13922

Siemens SINEMA Remote Connect Server (all versions

CVE-2019-13920: Cross-Site Request Forgery (CSRF)

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0 SP1. Some parts of the web application are not protected against Cross Site Request Forgery CSRF attacks. The security vulnerability could be exploited by an attacker that is able to trigger requests of a...

CVE-2019-13918: Improper Restriction of Excessive Authentication Attempts

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0 SP1. The web interface has no means to prevent password guessing attacks. The vulnerability could be exploited by an attacker with network access to the vulnerable software, requiring no privileges and no user...

CVE-2019-13919: Improper Access Control

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0 SP1. Some pages that should only be accessible by a privileged user can also be accessed by a non-privileged user. The security vulnerability could be exploited by an attacker with network access and valid...

PT-2019-13475

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V2.0 SP1 Description A security issue has been identified where certain pages, intended for privileged users, can be accessed by non-privileged users. This can be exploited by an attacker with...

CVE-2019-13922: Missing Encryption of Sensitive Data

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0 SP1. An attacker with administrative privileges can obtain the hash of a connected device's password. The security vulnerability could be exploited by an attacker with network access to the SINEMA Remote Connect...

PT-2019-13476

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V2.0 SP1 Description A security issue has been identified in the web application, where some parts are not protected against Cross Site Request Forgery CSRF attacks. This could be exploited by an...

Siemens SINEMA Remote Connect Server Password Guessing Vulnerability

Siemens SINEMA Remote Connect Server is a server application. SINEMA Remote Connect allows users to access remote equipment or machines so that maintenance can be performed easily and safely. A security vulnerability exists in Siemens SINEMA Remote Connect Server. An attacker could exploit this...

Siemens SINEMA Remote Connect Server Cross-Site Request Forgery Vulnerability

Siemens SINEMA Remote Connect Server is a server application. SINEMA Remote Connect allows users to access remote equipment or machines so that maintenance can be performed easily and safely. A security vulnerability exists in Siemens SINEMA Remote Connect Server. An attacker could exploit this...

Unspecified Vulnerability in Siemens SINEMA Remote Connect Server

Siemens SINEMA Remote Connect Server is a server application. SINEMA Remote Connect allows users to access remote equipment or machines so that maintenance can be performed easily and safely. An unspecified vulnerability exists in Siemens SINEMA Remote Connect Server. An attacker with...

Siemens SINEMA Remote Connect Server Unprivileged User Access Vulnerability

Siemens SINEMA Remote Connect Server is a server application. SINEMA Remote Connect allows users to access remote equipment or machines so that maintenance can be performed easily and safely. A security vulnerability exists in Siemens SINEMA Remote Connect Server. An attacker could exploit the...

PT-2019-4793

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V2.0 SP1 Description A security issue has been identified that allows an attacker with administrative privileges and network access to the SINEMA Remote Connect Server to obtain the hash of a...

PT-2019-4674

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V2.0 SP1 Description A vulnerability has been identified in the web interface of the SINEMA Remote Connect Server, which lacks a mechanism to prevent password guessing attacks. This issue could be...

ICSA-19-260-02 Siemens SINEMA Remote Connect Server

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SINEMA Remote Connect Server Vulnerabilities: Improper Restriction of Excessive Authentication Attempts, Information Exposure, Cross-Site Request Forgery, Use of Password Hash with Insufficient...

The vulnerability of the SINEMA Remote Connect server’s software lies in insufficient access control checks, allowing attackers to gain access to system resources through certain URL addresses, bypassing the authentication mechanism.

The vulnerability of the SINEMA Remote Connect server software is related to insufficient verification of access rights. Exploiting this vulnerability could allow a malicious actor to gain access to system resources through certain URL addresses, bypassing the authentication mechanism...

CVE-2019-6570

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0. Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability...