8.8
High
CVE-2024-39571 A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1)
Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are vulnerable to command injection due to missing server side input sanitation when loading SNMP configurations. This could allow an attacker with the right to modify the SNMP configuration to execute arbitrary code with root privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SINEMA Remote Connect Server | Versions not published | |
| sinema_remote_connect_server | Versions not published |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SINEMA Remote Connect Server
The 46 CVEs of SINEMA Remote Connect Server →
CVE-2025-40819
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4)
4.3
Medium
CVE-2025-40818
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4)
3.3
Low
CVE-2024-42345
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2)
4.3
Medium
CVE-2024-39876
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)
4.0
Medium