Siemens Simatic PCS 3.1

CPE Details

Siemens Simatic PCS 3.1
siemens
sinema_remote_connect_client
3.1
2024-04-18
13h19 +00:00
2024-04-18
13h19 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:siemens:sinema_remote_connect_client:3.1:-:*:*:*:*:*:*

Informations

Vendor

siemens

Product

sinema_remote_connect_client

Version

3.1

Update

-

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-42344 2024-09-10 09h36 +00:00 A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive information into a log file which is readable by all legitimate users of the underlying system. This could allow an authenticated attacker to compromise the confidentiality of other users' configuration data.
4.8
Medium
CVE-2024-39569 2024-07-09 12h05 +00:00 A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an administrative remote attacker running a corresponding SINEMA Remote Connect Server to execute arbitrary code with system privileges on the client system.
7.5
High
CVE-2024-39568 2024-07-09 12h05 +00:00 A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading proxy configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges.
8.5
High
CVE-2024-22045 2024-03-12 10h21 +00:00 A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.1 SP1). The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information. This information is also available via the web interface of the product.
7.6
High