VDB

CISA-2024-39567

CISA-2024-39567 PUBLISHED CVSS 7.8 HIGH

Reported by siemens · Published July 9, 2024

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges.

Risk Scores

CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Affected Products

VendorProductVersions
SiemensSINEMA Remote Connect Client0
siemenssinema_remote_connect_client0, 0
SiemensSINEMA Remote Connect Client0, 0

Timeline

  • Jul 9, 2024 CVE Published
  • Aug 27, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›