CVE-2024-39866

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with...

CVE-2024-39866

CVE-2024-39866 affects Siemens SINEMA Remote Connect Server (all versions prior to V3.2 SP1). The vulnerability is caused by privilege-related flaws in the backup-upload workflow: if an attacker can access the backup encryption key and upload backups, they can create a user with administrative pr...

CVE-2024-39866

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with...

CVE-2024-39865

The CVE-2024-39865 issue affects Siemens SINEMA Remote Connect Server: all versions prior to V3.2 SP1 are vulnerable to an Unrestricted Upload of a File with a Dangerous Type through the backup file upload feature. The backup process allows restoration without proper path validation, enabling an ...

CVE-2024-39865

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application allows users to upload encrypted backup files. As part of this backup, files can be restored without correctly checking the path of the restored file. This could allow an attacker...

CVE-2024-39865

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application allows users to upload encrypted backup files. As part of this backup, files can be restored without correctly checking the path of the restored file. This could allow an attacker...

CVE-2024-39571

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 HF1. Affected applications are vulnerable to command injection due to missing server side input sanitation when loading SNMP configurations. This could allow an attacker with the right to modify the SNMP...

CVE-2024-39571

Siemens SINEMA Remote Connect Server is affected by a command-injection vulnerability (CVE-2024-39571) due to missing server-side input sanitation when loading SNMP configurations. All versions before V3.2 HF1 are affected; an attacker with rights to modify SNMP configuration could execute arbitr...

CVE-2024-39571

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 HF1. Affected applications are vulnerable to command injection due to missing server side input sanitation when loading SNMP configurations. This could allow an attacker with the right to modify the SNMP...

CVE-2024-39570

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 HF1. Affected applications are vulnerable to command injection due to missing server side input sanitation when loading VxLAN configurations. This could allow an authenticated attacker to execute arbitrary code...

CVE-2024-39570

Siemens SINEMA Remote Connect Server is affected by CVE-2024-39570: all versions before V3.2 HF1 are vulnerable to command injection due to missing server-side input sanitation when loading VxLAN configurations. This could allow an authenticated attacker to execute arbitrary code with root privil...

CVE-2024-39570

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 HF1. Affected applications are vulnerable to command injection due to missing server side input sanitation when loading VxLAN configurations. This could allow an authenticated attacker to execute arbitrary code...

CVE-2024-39569

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.2 HF1. The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an administrative remote attacker...

CVE-2024-39569

CVE-2024-39569 affects Siemens SINEMA Remote Connect Client (all versions

CVE-2024-39569

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.2 HF1. The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an administrative remote attacker...

CVE-2024-39568

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.2 HF1. The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading proxy configurations. This could allow an authenticated local attacker...

CVE-2024-39568

Siemens SINEMA Remote Connect Client is affected: all versions prior to V3.2 HF1 are vulnerable to command injection due to missing server-side input sanitation when loading proxy configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges thr...

CVE-2024-39568

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.2 HF1. The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading proxy configurations. This could allow an authenticated local attacker...

CVE-2024-39567

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.2 HF1. The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an authenticated local attacker t...

CVE-2024-39567

The CVE-2024-39567 issue affects SINEMA Remote Connect Client (versions prior to V3.2 HF1). The vulnerability is a command-injection flaw in the system service caused by missing server-side input sanitation when loading VPN configurations, allowing an authenticated local attacker to execute arbit...