Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application creates temporary user credentials for UMC (User Management Component) users. An attacker could use these temporary credentials for authentication bypass in certain scenarios.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SINEMA Remote Connect Server | < V3.2 SP1 | V3.2 SP1 |
Advisories 3
- NCSC-2024-0282 Kwetsbaarheden verholpen in Siemens Producten NCSC-NL (Netherlands) · Jul 9, 2024
- ICSA-24-193-01 Siemens Remote Connect Server CISA ICS & IT advisories · Jul 9, 2024
- SSA-381581 SSA-381581: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1 Siemens ProductCERT · Jul 9, 2024