High ICSA-19-099-04 5 CVEs

Siemens SINEMA Remote Connect (Update A)

Published Apr 9, 2019 · Updated Mar 9, 2021 · Revision 2

Vendor: Siemens Product: SINEMA Remote Connect Client Product: SINEMA Remote Connect Server

Summary

Successful exploitation of these vulnerabilities could allow an attacker to circumvent the system authorization for certain functionalities, and to execute privileged functions.

Vulnerabilities 5

High 7.5

CVE-2018-14618 EPSS 11%

curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Cur…

[UNKNOWN] curl curl curl Debian Ubuntu Alpine

Sep 5, 2018
High 7.1

CVE-2019-3822 EPSS 13%

libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an…

The curl Project curl curl curl Debian Ubuntu Alpine

Feb 6, 2019
Medium 5.4

CVE-2018-16890 Public exploit

libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling …

The curl Project curl curl curl Debian Ubuntu Alpine

Feb 6, 2019
Medium 4.3

CVE-2019-3823

libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-…

The curl Project curl curl curl Debian Ubuntu Alpine

Feb 6, 2019
Unscored —

CVE-2019-6570

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking…

Siemens SINEMA Remote Connect Server ICS / OT

Apr 17, 2019

Revision history

2021-03-09 #2
ICSA-19-099-04 Siemens SINEMA Remote Connect (Update A)
2019-04-09 #1
ICSA-19-099-04 Siemens SINEMA Remote Connect

References

ICS Advisory ICSA-19-099-04 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-099-04
Recommended Practices
https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B
SSA-496604: SSA-436177: Multiple Vulnerabilities in SINEMA Remote Connect - TXT Version
https://cert-portal.siemens.com/productcert/txt/SSA-436177.txt