Siemens SINEMA Remote Connect Client 3.2
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:sinema_remote_connect_client:3.2:-:*:*:*:*:*:*part: a version: 3.2 update: -
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Sinema Remote Connect Client (e2e5958f-37fd-5a15-b2b7-57adde9f3b66) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-42344 |
vulnerable | 2026-06-08 06:43:56.452158 |
Details available
MEDIUM (4.4)
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive information into a log file which is readable by all legitimate users of the underlying system. This could allow an authenticated attacker to compromise the confidentiality of other users' configuration data.
Published: 2024-09-10T09:36:47.430Z
Updated: 2024-09-10T14:54:10.749Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39569 |
vulnerable | 2026-06-08 06:41:51.075209 |
Details available
MEDIUM (6.6)
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an administrative remote attacker running a corresponding SINEMA Remote Connect Server to execute arbitrary code with system privileges on the client system.
Published: 2024-07-09T12:05:14.075Z
Updated: 2025-08-27T20:42:55.632Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39568 |
vulnerable | 2026-06-08 06:41:51.074717 |
Details available
HIGH (7.8)
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading proxy configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges.
Published: 2024-07-09T12:05:12.815Z
Updated: 2025-08-27T20:42:55.210Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39567 |
vulnerable | 2026-06-08 06:41:51.073349 |
Details available
HIGH (7.8)
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges.
Published: 2024-07-09T12:05:11.543Z
Updated: 2025-08-27T20:42:55.068Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32006 |
vulnerable | 2026-06-08 06:35:32.616064 |
Details available
MEDIUM (4.3)
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application does not expire the user session on reboot without logout. This could allow an attacker to bypass Multi-Factor Authentication.
Published: 2024-09-10T09:36:29.757Z
Updated: 2024-09-10T18:27:26.138Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.