Unauthenticated Access Vulnerability in SINEMA Remote Connect Server by Siemens

CVE-2024-39868

Summary

A vulnerability has been identified in all versions of SINEMA Remote Connect Server prior to V3.2 SP1. This vulnerability arises due to inadequate validation of user authentication on the web interface. As a consequence, an attacker without any authentication could exploit this flaw to access and modify VxLAN configuration settings of networks, potentially impacting network integrity and security. It is crucial for users of the affected product to assess their systems and apply necessary updates to mitigate any potential risks.

References