CVE-2021-37190 — Vulnetix

CVE-2021-37190 PUBLISHED CVSS 3.299999952316284 LOW

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known user.

EPSS 0.08% · 22.7th percentile

Risk Scores

CVSS 2.0

3.299999952316284

EPSS Score

0.08%

22.7th percentile

Affected Products

Vendor	Product	Versions
siemens	sinema_remote_connect_server	3.0, 3.0, 0
Siemens	SINEMA Remote Connect Server	All versions < V3.0 SP2

Exploit Intelligence

This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 (CVE-2016-10708) by sending unexpected `SSH_MSG_NEWKEYS` packets. (github-poc)
This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 (CVE-2016-10708) by sending unexpected `SSH_MSG_NEWKEYS` packets. (github-poc)
This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 (CVE-2016-10708) by sending unexpected `SSH_MSG_NEWKEYS` packets. (github-poc)
This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 (CVE-2016-10708) by sending unexpected `SSH_MSG_NEWKEYS` packets. (github-poc)
This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 (CVE-2016-10708) by sending unexpected `SSH_MSG_NEWKEYS` packets. (github-poc)
https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf (circl)

Timeline

Apr 13, 2021 CVE Published
Sep 15, 2021 EPSS Score
Nov 11, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Jan 8, 2022 EPSS Score
Mar 6, 2022 EPSS Score
May 3, 2022 EPSS Score
Jun 29, 2022 EPSS Score
Aug 27, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Dec 20, 2022 EPSS Score
Feb 15, 2023 EPSS Score

References

…and 2 more

Open in Interactive Console →