CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-42345

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2). The affected application does not properly handle user session establishment and invalidation. This could allow a remote attacker to circumvent the additional multi factor authentication for user session establishment.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.2%

CVSS Severity

CVSS v3 Score 4.3

References

https://cert-portal.siemens.com/productcert/html/ssa-869574.html

Products affected by CVE-2024-42345

Siemens » Sinema Remote Connect Server » Version: N/A

cpe:2.3:a:siemens:sinema_remote_connect_server:-
Siemens » Sinema Remote Connect Server » Version: 1.0

cpe:2.3:a:siemens:sinema_remote_connect_server:1.0
Siemens » Sinema Remote Connect Server » Version: 1.1

cpe:2.3:a:siemens:sinema_remote_connect_server:1.1
Siemens » Sinema Remote Connect Server » Version: 1.2

cpe:2.3:a:siemens:sinema_remote_connect_server:1.2
Siemens » Sinema Remote Connect Server » Version: 1.3

cpe:2.3:a:siemens:sinema_remote_connect_server:1.3
Siemens » Sinema Remote Connect Server » Version: 2.0

cpe:2.3:a:siemens:sinema_remote_connect_server:2.0
Siemens » Sinema Remote Connect Server » Version: 3.0

cpe:2.3:a:siemens:sinema_remote_connect_server:3.0
Siemens » Sinema Remote Connect Server » Version: 3.1

cpe:2.3:a:siemens:sinema_remote_connect_server:3.1
Siemens » Sinema Remote Connect Server » Version: 3.2

cpe:2.3:a:siemens:sinema_remote_connect_server:3.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-42345

Products

Pricing

Contact Us