Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2). The affected application does not properly handle user session establishment and invalidation. This could allow a remote attacker to circumvent the additional multi factor authentication for user session establishment.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SINEMA Remote Connect Server | < V3.2 SP2 | V3.2 SP2 |
Advisories 3
- NCSC-2024-0362 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Sep 10, 2024
- ICSA-24-256-01 Siemens SINEMA Remote Connect Server CISA ICS & IT advisories · Sep 10, 2024
- SSA-869574 SSA-869574: Multiple Vulnerabilities in SINEMA Remote Connect Server Before V3.2 SP2 Siemens ProductCERT · Sep 10, 2024