Local User Privilege Escalation in SINEMA Remote Connect Server by Siemens

CVE-2024-39870

Summary

A vulnerability has been detected in SINEMA Remote Connect Server, affecting all versions prior to V3.2 SP1. This vulnerability allows a local authenticated user with privileges to manage user accounts to exploit the application by modifying user details outside their designated permissions. This capability can lead to unauthorized privilege escalation, compromising the system's integrity and potentially allowing attackers to gain elevated access to sensitive resources.

References