Command Injection Vulnerability in SINEMA Remote Connect Client by Siemens

CVE-2024-39569

What is CVE-2024-39569?

A vulnerability has been identified in the SINEMA Remote Connect Client, where the system service is susceptible to command injection due to inadequate server-side input sanitation during the loading of VPN configurations. This vulnerability enables an administrative remote attacker, running an associated SINEMA Remote Connect Server, to execute arbitrary code with system privileges on the client's system, potentially compromising the integrity and security of affected environments.

References