7.8
Élevée
CVE-2024-39567 A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1)
Description
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SINEMA Remote Connect Client | Versions non publiées | |
| sinema_remote_connect_client | Versions non publiées |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SINEMA Remote Connect Client
Les 13 CVE de SINEMA Remote Connect Client →
CVE-2025-30033
The affected setup component is vulnerable to DLL hijacking
7.8
Élevée
CVE-2024-42344
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2)
4.4
Moyenne
CVE-2024-33698
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410),…
9.8
Critique
CVE-2024-32006
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2)
4.3
Moyenne