Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:sinema_remote_connect_client:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSinema Remote Connect Client (e2e5958f-37fd-5a15-b2b7-57adde9f3b66)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-30033 vulnerable 2026-06-08 07:16:58.989789 Details available
HIGH (7.8)
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.
Published: 2025-08-12T11:16:56.565Z
Updated: 2026-10-13T09:18:18.488Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42344 vulnerable 2026-06-08 06:43:56.451356 Details available
MEDIUM (4.4)
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive information into a log file which is readable by all legitimate users of the underlying system. This could allow an authenticated attacker to compromise the confidentiality of other users' configuration data.
Published: 2024-09-10T09:36:47.430Z
Updated: 2024-09-10T14:54:10.749Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39569 vulnerable 2026-06-08 06:41:51.075168 Details available
MEDIUM (6.6)
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an administrative remote attacker running a corresponding SINEMA Remote Connect Server to execute arbitrary code with system privileges on the client system.
Published: 2024-07-09T12:05:14.075Z
Updated: 2025-08-27T20:42:55.632Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39568 vulnerable 2026-06-08 06:41:51.074684 Details available
HIGH (7.8)
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading proxy configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges.
Published: 2024-07-09T12:05:12.815Z
Updated: 2025-08-27T20:42:55.210Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39567 vulnerable 2026-06-08 06:41:51.072665 Details available
HIGH (7.8)
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges.
Published: 2024-07-09T12:05:11.543Z
Updated: 2025-08-27T20:42:55.068Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33698 vulnerable 2026-06-08 06:37:32.109885 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32006 vulnerable 2026-06-08 06:35:32.615030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22045 vulnerable 2026-06-08 06:29:33.475502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31338 vulnerable 2026-06-08 05:31:52.361244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3822 vulnerable 2026-06-08 05:13:56.122035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16890 vulnerable 2026-06-08 05:11:05.745267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.