CVE-2019-13919: Improper Access Control

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0 SP1. Some pages that should only be accessible by a privileged user can also be accessed by a non-privileged user. The security vulnerability could be exploited by an attacker with network access and valid...

PT-2019-13475

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V2.0 SP1 Description A security issue has been identified where certain pages, intended for privileged users, can be accessed by non-privileged users. This can be exploited by an attacker with...

CVE-2019-13922: Missing Encryption of Sensitive Data

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0 SP1. An attacker with administrative privileges can obtain the hash of a connected device's password. The security vulnerability could be exploited by an attacker with network access to the SINEMA Remote Connect...

PT-2019-13476

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V2.0 SP1 Description A security issue has been identified in the web application, where some parts are not protected against Cross Site Request Forgery CSRF attacks. This could be exploited by an...

Siemens SINEMA Remote Connect Server Password Guessing Vulnerability

Siemens SINEMA Remote Connect Server is a server application. SINEMA Remote Connect allows users to access remote equipment or machines so that maintenance can be performed easily and safely. A security vulnerability exists in Siemens SINEMA Remote Connect Server. An attacker could exploit this...

Siemens SINEMA Remote Connect Server Unprivileged User Access Vulnerability

Siemens SINEMA Remote Connect Server is a server application. SINEMA Remote Connect allows users to access remote equipment or machines so that maintenance can be performed easily and safely. A security vulnerability exists in Siemens SINEMA Remote Connect Server. An attacker could exploit the...

Unspecified Vulnerability in Siemens SINEMA Remote Connect Server

Siemens SINEMA Remote Connect Server is a server application. SINEMA Remote Connect allows users to access remote equipment or machines so that maintenance can be performed easily and safely. An unspecified vulnerability exists in Siemens SINEMA Remote Connect Server. An attacker with...

ICSA-19-260-02 Siemens SINEMA Remote Connect Server

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SINEMA Remote Connect Server Vulnerabilities: Improper Restriction of Excessive Authentication Attempts, Information Exposure, Cross-Site Request Forgery, Use of Password Hash with Insufficient...

PT-2019-4793

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V2.0 SP1 Description A security issue has been identified that allows an attacker with administrative privileges and network access to the SINEMA Remote Connect Server to obtain the hash of a...

PT-2019-4674

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V2.0 SP1 Description A vulnerability has been identified in the web interface of the SINEMA Remote Connect Server, which lacks a mechanism to prevent password guessing attacks. This issue could be...

The vulnerability of the SINEMA Remote Connect server’s software lies in insufficient access control checks, allowing attackers to gain access to system resources through certain URL addresses, bypassing the authentication mechanism.

The vulnerability of the SINEMA Remote Connect server software is related to insufficient verification of access rights. Exploiting this vulnerability could allow a malicious actor to gain access to system resources through certain URL addresses, bypassing the authentication mechanism...

CVE-2019-6570

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0. Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability...

CVE-2019-6570

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0. Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability...

Design/Logic Flaw

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0. Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability...

CVE-2019-6570

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0. Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability...

CVE-2019-6570

CVE-2019-6570 affects Siemens SINEMA Remote Connect Server (all versions prior to 2.0). The root cause is an insufficient checking of user permissions, enabling an attacker with a low-privileged account and network access to reach URLs that require special authorization, impacting confidentiality...

CVE-2019-6570: Improper Handling of Insufficient Permissions or Privileges

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0. Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability...

PT-2019-2036

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V2.0 Description The issue is related to insufficient checking of user permissions, allowing an attacker to access URLs that require special authorization. To exploit this, an attacker must have...

Siemens SINEMA Remote Connect (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SINEMA Remote Connect Client and Server Vulnerabilities: Incorrect Calculation of Buffer Size, Out-of-bounds Read, Stack-based Buffer Overflow, Improper Handling of Insufficient...

CVE-2016-6204

Cross-site scripting XSS vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...