Siemens SINEMA Remote Connect Server 安全漏洞

Siemens SINEMA Remote Connect Server is a remote network management platform from Siemens, Germany. The platform is used to remotely access, maintain, control and diagnose the underlying network. A security vulnerability exists in Siemens SINEMA Remote Connect Server versions prior to 3.0 SP2,...

PT-2021-21559 · Siemens · Sinema Remote Connect Server

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.0 SP2 Description: A vulnerability has been identified that allows an unauthenticated attacker in the same network to abuse send-to-sleep notifications and cause a Denial-of-Service condition ...

CVE-2021-37193: Modification of Assumed-Immutable Data (MAID)

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. An unauthenticated attacker in the same network of the affected system could manipulate certain parameters and set a valid user of the affected software as invalid or vice-versa...

PT-2021-21566

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V3.0 SP2 Description The issue is related to an information disclosure problem that could allow an attacker to retrieve VPN connection details for a known user. Recommendations For versions prior ...

CVE-2021-37190: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known user...

CVE-2021-37191: Improper Control of Interaction Frequency

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. An unauthenticated attacker in the same network of the affected system could brute force the usernames from the affected software...

CVE-2021-37177: Modification of Assumed-Immutable Data (MAID)

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. The status provided by the syslog clients managed by the affected software can be manipulated by an unauthenticated attacker in the same network of the affected system...

PT-2021-21553

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V3.0 SP2 Description A vulnerability has been identified that allows an unauthenticated attacker in the same network as the affected system to manipulate the status provided by the syslog clients...

PT-2021-21569

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V3.0 SP2 Description A vulnerability has been identified that allows an unauthenticated attacker in the same network to manipulate certain parameters, potentially setting a valid user of the...

PT-2021-21567

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V3.0 SP2 Description A vulnerability has been identified that allows an unauthenticated attacker in the same network as the affected system to brute force usernames from the affected software...

PT-2021-21568

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V3.0 SP2 Description The issue is related to an information disclosure problem that could allow an attacker to retrieve a list of network devices a known user can manage. This could potentially...

CVE-2021-31338

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.0 SP1. Affected devices allow to modify configuration settings over an unauthenticated channel. This could allow a local attacker to escalate privileges and execute own code on the device...

CVE-2021-31338

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.0 SP1. Affected devices allow to modify configuration settings over an unauthenticated channel. This could allow a local attacker to escalate privileges and execute own code on the device...

Code injection

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.0 SP1. Affected devices allow to modify configuration settings over an unauthenticated channel. This could allow a local attacker to escalate privileges and execute own code on the device...

CVE-2021-31338

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.0 SP1. Affected devices allow to modify configuration settings over an unauthenticated channel. This could allow a local attacker to escalate privileges and execute own code on the device...

CVE-2021-31338

The CVE-2021-31338 issue affects SINEMA Remote Connect Client (all versions

CVE-2021-31338: External Control of System or Configuration Setting

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.0 SP1. Affected devices allow to modify configuration settings over an unauthenticated channel. This could allow a local attacker to escalate privileges and execute own code on the device...

PT-2021-4936

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Client versions prior to V3.0 SP1 Description A vulnerability has been identified that allows modification of configuration settings over an unauthenticated channel. This could enable a local attacker to escalate privileg...

Siemens SINEMA Remote Connect Server

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SINEMA Remote Connect Server Vulnerabilities: Missing Release of Resource after Effective Lifetime, Infinite Loop 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

CVE-2020-25240

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0. Unpriviledged users can access services when guessing the url. An attacker could impact availability, integrity and gain information from logs and templates of the service...