Description
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application does not expire the user session on reboot without logout. This could allow an attacker to bypass Multi-Factor Authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SINEMA Remote Connect Client | < V3.2 SP2 | V3.2 SP2 |
Advisories 3
- NCSC-2024-0362 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Sep 10, 2024
- ICSA-24-256-10 Siemens SINEMA CISA ICS & IT advisories · Sep 10, 2024
- SSA-417159 SSA-417159: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP2 Siemens ProductCERT · Sep 10, 2024