7.8
High
CVE-2024-39567 A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1)
Description
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SINEMA Remote Connect Client | Versions not published | |
| sinema_remote_connect_client | Versions not published |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SINEMA Remote Connect Client
The 13 CVEs of SINEMA Remote Connect Client →
CVE-2025-30033
The affected setup component is vulnerable to DLL hijacking
7.8
High
CVE-2024-42344
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2)
4.4
Medium
CVE-2024-33698
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410),…
9.8
Critical
CVE-2024-32006
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2)
4.3
Medium