Skip to content
OpenAdvisories
Critical SSA-615740 6 CVEs

SSA-615740: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP3

Published Mar 11, 2025 · Updated Mar 11, 2025

Summary

SINEMA Remote Connect Client before V3.2 SP3 is affected by multiple vulnerabilities.

Siemens has released a new version for SINEMA Remote Connect Client and recommends to update to the latest version.

Vulnerabilities 6

  • Critical 9.8
    CVE-2024-1305 EPSS 15%

    tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which …

  • High 8.8

    OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe wh…

  • High 7.5

    The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which all…

  • High 7.2

    The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can…

  • High 7.2

    OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker…

  • Medium 4.3

    OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which…

Revision history

  1. #1

    Publication Date

References