Command Injection Vulnerability in SINEMA Remote Connect Server by Siemens

CVE-2024-39571

Summary

A vulnerability has been identified in SENEMA Remote Connect Server, where all versions prior to V3.2 HF1 are susceptible to command injection. This weakness arises from insufficient server-side input sanitation when handling SNMP configurations. An attacker with permissions to alter the SNMP configuration can potentially execute arbitrary code with root privileges, posing significant risks to the system's integrity and security. Organizations using affected versions are advised to implement security measures and upgrade to secure versions promptly.

References