Remote Connect Client Vulnerability Allows Bypass of Multi-Factor Authentication Without Logout
CVE-2024-32006

4.3MEDIUM

Key Information:

Vendor
Siemens
Status
Sinema Remote Connect Client
Vendor
CVE Published:
10 September 2024

Summary

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application does not expire the user session on reboot without logout. This could allow an attacker to bypass Multi-Factor Authentication.

Affected Version(s)

SINEMA Remote Connect Client 0

References

https://cert-portal.siemens.com/productcert/html/ssa-4171...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.