CVE-2022-32262

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. The affected application contains a file upload server that is vulnerable to command injection. An attacker could use this to achieve arbitrary code execution...

CVE-2022-32257

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2. The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to resources and potentially lead to code execution...

CVE-2022-24281

A vulnerability has been identified in SINEC NMS All versions V1.0.3, SINEMA Server V14 All versions. A privileged authenticated attacker could execute arbitrary commands in the local database by sending specially crafted requests to the webserver of the affected application...

CVE-2022-24282

A vulnerability has been identified in SINEC NMS All versions = V1.0.3 V2.0, SINEC NMS All versions V1.0.3, SINEMA Server V14 All versions. The affected system allows to upload JSON objects that are deserialized to Java objects. Due to insecure deserialization of user-supplied content by the...

CVE-2024-22045

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.1 SP1. The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information. This information is also...

CVE-2024-39865

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application allows users to upload encrypted backup files. As part of this backup, files can be restored without correctly checking the path of the restored file. This could allow an attacker...

CVE-2024-39568

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.2 HF1. The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading proxy configurations. This could allow an authenticated local attacker...

CVE-2024-39874

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application does not properly implement brute force protection against user credentials in its Client Communication component. This could allow an attacker to learn user credentials that are...

CVE-2024-39866

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with...

CVE-2024-39570

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 HF1. Affected applications are vulnerable to command injection due to missing server side input sanitation when loading VxLAN configurations. This could allow an authenticated attacker to execute arbitrary code...

The vulnerability of Siemens SINEMA Remote Connect arises from the use of incorrect authentication tokens due to unlimited distribution of resources, which can lead to service failures.

The vulnerability of Siemens SINEMA Remote Connect relates to the use of incorrect authentication tokens due to unlimited distribution of resources. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of Siemens SINEMA Remote Connect lies in its insufficient limit on authentication attempts, allowing attackers to obtain encrypted user credentials.

The vulnerability of Siemens SINEMA Remote Connect relates to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to obtain encrypted user credentials remotely...

The vulnerability of the Group Membership Handler component in the Siemens SINEMA Remote Connect server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Group Membership Handler component in the Siemens SINEMA Remote Connect server is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Firmware Update Handler component of the Siemens SINEMA Remote Connect server allows a hacker to gain increased privileges.

The vulnerability of the Firmware Update Handler component in Siemens SINEMA Remote Connect relates to the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the Client Communication component of the Siemens SINEMA Remote Connect server allows a hacker to obtain encrypted user credentials.

The vulnerability of the Client Communication component in the Siemens SINEMA Remote Connect server is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to obtain encrypted user credentials remotely...

The vulnerability of Siemens SINEMA Remote Connect lies in the implementation of security features at the client side, which allows attackers to enhance their privileges.

The vulnerability of the Siemens SINEMA Remote Connect server is related to the implementation of security functions at the client side. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

The vulnerability of Siemens SINEMA Remote Connect lies in the insufficient checking of unusual or exceptional states, allowing a perpetrator to trigger a service failure.

The vulnerability of the Siemens SINEMA Remote Connect web interface is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Siemens SINEMA Remote Connect allows a hacker to gain unauthorized access to groups of participants to which they do not have permission to access.

The vulnerability of the Siemens SINEMA Remote Connect server is related to incorrect authorization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to groups of participants to which they do not have access...

The vulnerability of the TOTP (Time-based One-Time Password) algorithm used by the SINEMA Remote Connect VPN service allows a perpetrator to bypass the authentication process.

The vulnerability of the TOTP Time-based One-Time Password algorithm used by the SINEMA Remote Connect VPN service lies in the incorrect validity period of the session. Exploiting this vulnerability could allow an attacker to bypass the authentication process remotely...

Unspecified Vulnerability in Siemens SINEMA Remote Connect Client

Siemens SINEMA Remote Connect is a remote management platform from Siemens, Germany. The platform supports efficient and secure remote access to globally distributed machines and ensures secure management of VPN channels between control centers, service engineers and installed equipment. An...