CVE-2024-39869

Siemens SINEMA Remote Connect Server is affected: all versions prior to V3.2 SP1 allow uploading certificates, and an authenticated attacker can upload crafted certificates that cause a permanent Denial-of-Service. The vulnerability stems from improper handling during certificate upload (unusual/...