Command Injection Vulnerability in SINEMA Remote Connect Server by Siemens
CVE-2024-39571

8.7HIGH

Key Information:

Vendor

Siemens
Status
Sinema Remote Connect Server
Vendor
CVE Published:
9 July 2024

What is CVE-2024-39571?

A vulnerability has been identified in SENEMA Remote Connect Server, where all versions prior to V3.2 HF1 are susceptible to command injection. This weakness arises from insufficient server-side input sanitation when handling SNMP configurations. An attacker with permissions to alter the SNMP configuration can potentially execute arbitrary code with root privileges, posing significant risks to the system's integrity and security. Organizations using affected versions are advised to implement security measures and upgrade to secure versions promptly.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SINEMA Remote Connect Server 0

References

https://cert-portal.siemens.com/productcert/html/ssa-9287...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

JSON
.