CVE-2021-37191

CVE-2021-37191 affects Siemens SINEMA Remote Connect Server: all versions prior to 3.0 SP2 are vulnerable to an unauthenticated attacker on the same network brute-forcing usernames. The Red Hat and CNVD/Wikipedia entries corroborate the impact as an in-network username enumeration risk; ICSA note...

CVE-2021-37183

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. The affected software allows sending send-to-sleep notifications to the managed devices. An unauthenticated attacker in the same network of the affected system can abuse these notifications to cause a...

CVE-2021-37183

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. The affected software allows sending send-to-sleep notifications to the managed devices. An unauthenticated attacker in the same network of the affected system can abuse these notifications to cause a...

CVE-2021-37183

Siemens SINEMA Remote Connect Server is affected by CVE-2021-37183 (vulnerable: all versions before 3.0 SP2). An unauthenticated attacker on the same network can abuse the send-to-sleep notification mechanism to cause a Denial-of-Service on managed devices. The issue is described as an access-con...

CVE-2021-37177

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. The status provided by the syslog clients managed by the affected software can be manipulated by an unauthenticated attacker in the same network of the affected system...

CVE-2021-37177

The CVE-2021-37177 entry affects Siemens SINEMA Remote Connect Server (all versions before 3.0 SP2). The vulnerability allows an unauthenticated attacker on the same network to manipulate the status provided by managed syslog clients, indicating a modification of assumed-immutable data (CWE-471) ...

CVE-2019-10941

A vulnerability has been identified in SINEMA Server All versions V14 SP3. Missing authentication for functionality that requires administrative user identity could allow an attacker to obtain encoded system configuration backup files. This is only possible through network access to the affected...

CVE-2019-10941

Summary of CVE-2019-10941 : Affected product is Siemens SINEMA Server (all versions prior to v14 SP3). The root cause is Missing authentication for functionality requiring an administrative identity , enabling an attacker with network access to obtain encoded system configuration backup files. Im...

CVE-2021-37183: Improper Access Control

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. The affected software allows sending send-to-sleep notifications to the managed devices. An unauthenticated attacker in the same network of the affected system can abuse these notifications to cause a...

PT-2021-21553

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V3.0 SP2 Description A vulnerability has been identified that allows an unauthenticated attacker in the same network as the affected system to manipulate the status provided by the syslog clients...

PT-2021-8876

Name of the Vulnerable Software and Affected Versions SINEMA Server versions prior to V14 SP3 Description A vulnerability has been identified that could allow an attacker to obtain encoded system configuration backup files due to missing authentication for functionality requiring administrative...

PT-2021-21559 · Siemens · Sinema Remote Connect Server

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.0 SP2 Description: A vulnerability has been identified that allows an unauthenticated attacker in the same network to abuse send-to-sleep notifications and cause a Denial-of-Service condition ...

CVE-2019-10941: Missing Authentication for Critical Function

A vulnerability has been identified in SINEMA Server All versions V14 SP3. Missing authentication for functionality that requires administrative user identity could allow an attacker to obtain encoded system configuration backup files. This is only possible through network access to the affected...

CVE-2021-37192: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. The affected software has an information disclosure vulnerability that could allow an attacker to retrieve a list of network devices a known user can manage...

Siemens SINEMA Server

1. EXECUTIVE SUMMARY CVSS v3 4.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SINEMA Server Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to obtain encoded...

Siemens SINEMA Remote Connect Server

1. EXECUTIVE SUMMARY CVSS v3 7.4 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SINEMA Remote Connect Server Vulnerabilities: Modification of Assumed-Immutable Data, Improper Access Control, Exposure of Sensitive Information to an Unauthorized Actor, Improper...

PT-2021-21569

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V3.0 SP2 Description A vulnerability has been identified that allows an unauthenticated attacker in the same network to manipulate certain parameters, potentially setting a valid user of the...

PT-2021-21568

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V3.0 SP2 Description The issue is related to an information disclosure problem that could allow an attacker to retrieve a list of network devices a known user can manage. This could potentially...

SINEMA Server 访问控制错误漏洞

Siemens SINEMA Server is a software developed for industrial applications by Siemens, Germany. It enables you to fully visualize and monitor your network. Siemens SINEMA Server has a security vulnerability that could be exploited by an attacker to obtain encoded system configuration backup files...

Siemens SINEMA Remote Connect Server 访问控制错误漏洞

Siemens SINEMA Remote Connect Server is a remote network management platform from Siemens, Germany. The platform is used to remotely access, maintain, control and diagnose the underlying network. An access control error vulnerability exists in Siemens SINEMA Remote Connect Server versions prior t...