Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly handle log rotation. This could allow an unauthenticated remote attacker to cause a denial of service condition through resource exhaustion on the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SINEMA Remote Connect Server | < V3.2 SP1 | V3.2 SP1 |
Advisories 3
- NCSC-2024-0282 Kwetsbaarheden verholpen in Siemens Producten NCSC-NL (Netherlands) · Jul 9, 2024
- ICSA-24-193-01 Siemens Remote Connect Server CISA ICS & IT advisories · Jul 9, 2024
- SSA-381581 SSA-381581: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1 Siemens ProductCERT · Jul 9, 2024