Path Traversal Vulnerability in SINEMA Remote Connect Server by Siemens

CVE-2024-39865

What is CVE-2024-39865?

A security vulnerability has been identified in SINEMA Remote Connect Server versions prior to V3.2 SP1. This vulnerability arises from inadequate validation during the restoration of files from encrypted backups. Attackers with access to the backup encryption key can exploit this issue by uploading malicious files. This could potentially allow unauthorized remote code execution, posing significant risks to systems utilizing the affected version of SINEMA Remote Connect Server.

References