Siemens SINEMA Remote Connect Server 3.2 HF1
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:sinema_remote_connect_server:3.2:hf1:*:*:*:*:*:*
part: a version: 3.2 update: hf1
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Sinema Remote Connect Server (71e8c2cb-d366-5715-bdd5-7ab81879640f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-42345 |
vulnerable | 2026-06-08 06:43:56.456424 |
Details available
MEDIUM (4.3)
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2). The affected application does not properly handle user session establishment and invalidation. This could allow a remote attacker to circumvent the additional multi factor authentication for user session establishment.
Published: 2024-09-10T09:36:48.651Z
Updated: 2024-09-10T14:53:36.766Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39874 |
vulnerable | 2026-06-08 06:41:51.752528 |
Details available
HIGH (7.5)
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against user credentials in its Client Communication component. This could allow an attacker to learn user credentials that are vulnerable to brute force attacks.
Published: 2024-07-09T12:05:31.563Z
Updated: 2025-08-27T20:42:57.478Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39873 |
vulnerable | 2026-06-08 06:41:51.751744 |
Details available
HIGH (7.5)
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against user credentials in its web API. This could allow an attacker to learn user credentials that are vulnerable to brute force attacks.
Published: 2024-07-09T12:05:30.268Z
Updated: 2025-08-27T20:42:57.342Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39872 |
vulnerable | 2026-06-08 06:41:51.748159 |
Details available
CRITICAL (9.6)
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly assign rights to temporary files created during its update process. This could allow an authenticated attacker with the 'Manage firmware updates' role to escalate their privileges on the underlying OS level.
Published: 2024-07-09T12:05:28.983Z
Updated: 2025-08-27T20:42:57.191Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39871 |
vulnerable | 2026-06-08 06:41:51.747573 |
Details available
MEDIUM (6.3)
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly separate the rights to edit device settings and to edit settings for communication relations. This could allow an authenticated attacker with the permission to manage devices to gain access to participant groups that the attacked does not belong to.
Published: 2024-07-09T12:05:27.689Z
Updated: 2025-08-27T20:42:57.056Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39870 |
vulnerable | 2026-06-08 06:41:51.747049 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39869 |
vulnerable | 2026-06-08 06:41:51.746621 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39868 |
vulnerable | 2026-06-08 06:41:51.746210 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39867 |
vulnerable | 2026-06-08 06:41:51.745748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39866 |
vulnerable | 2026-06-08 06:41:51.745109 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39865 |
vulnerable | 2026-06-08 06:41:51.743721 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.