CVE-2021-37191 — Vulnetix

CVE-2021-37191 PUBLISHED CVSS 3.299999952316284 LOW

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected system could brute force the usernames from the affected software.

EPSS 0.10% · 27.4th percentile

Risk Scores

CVSS 2.0

3.299999952316284

EPSS Score

0.10%

27.4th percentile

Affected Products

Vendor	Product	Versions
Siemens	SINEMA Remote Connect Server	All versions < V3.0 SP2
siemens	sinema_remote_connect_server	0, 3.0, 3.0

Exploit Intelligence

This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 (CVE-2016-10708) by sending unexpected `SSH_MSG_NEWKEYS` packets. (github-poc)
This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 (CVE-2016-10708) by sending unexpected `SSH_MSG_NEWKEYS` packets. (github-poc)
This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 (CVE-2016-10708) by sending unexpected `SSH_MSG_NEWKEYS` packets. (github-poc)
This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 (CVE-2016-10708) by sending unexpected `SSH_MSG_NEWKEYS` packets. (github-poc)
This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 (CVE-2016-10708) by sending unexpected `SSH_MSG_NEWKEYS` packets. (github-poc)
https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf (circl)

Timeline

Apr 13, 2021 CVE Published
Sep 15, 2021 EPSS Score
Nov 11, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Jan 8, 2022 EPSS Score
Mar 6, 2022 EPSS Score
May 3, 2022 EPSS Score
Jun 29, 2022 EPSS Score
Aug 27, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Dec 20, 2022 EPSS Score
Feb 15, 2023 EPSS Score

References

…and 2 more

Open in Interactive Console →