Siemens SINEMA Remote Connect Server 3.2 Service Pack 2
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:sinema_remote_connect_server:3.2:sp2:*:*:*:*:*:*
part: a version: 3.2 update: sp2
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Sinema Remote Connect Server (71e8c2cb-d366-5715-bdd5-7ab81879640f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-40819 |
vulnerable | 2026-06-08 07:25:05.837478 |
Details available
MEDIUM (4.3)
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications do not properly validate license restrictions against the database, allowing direct modification of the system_ticketinfo table to bypass license limitations without proper enforcement checks. This could allow with database access to circumvent licensing restrictions by directly modifying database values and potentially enabling unauthorized use beyond the permitted scope.
Published: 2025-12-09T10:44:29.280Z
Updated: 2025-12-09T16:24:31.046Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40818 |
vulnerable | 2026-06-08 07:25:05.836228 |
Details available
LOW (3.3)
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications contain private SSL/TLS keys on the server that are not properly protected allowing any user with server access to read these keys. This could allow an authenticated attacker to impersonate the server potentially enabling man-in-the-middle, traffic decryption or unauthorized access to services that trust these certificates.
Published: 2025-12-09T10:44:28.093Z
Updated: 2025-12-09T16:41:46.876Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.