Approved changes feed: RSS · Atom

cpe:2.3:a:siemens_ag:sinema_remote_connect_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens Ag (6b4625df-dd28-5c6a-8569-4e99d778ef77)
ProductSinema Remote Connect Server (1dd8e0e7-9ef0-5be4-a570-7201f61d7011)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-13922 vulnerable 2026-06-08 05:12:52.430015 Details available
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). An attacker with administrative privileges can obtain the hash of a connected device's password. The security vulnerability could be exploited by an attacker with network access to the SINEMA Remote Connect Server and administrative privileges. At the time of advisory publication no public exploitation of this security vulnerability was known.
Published: 2019-09-13T16:38:32.000Z
Updated: 2024-08-05T00:05:43.995Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13920 vulnerable 2026-06-08 05:12:52.420257 Details available
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some parts of the web application are not protected against Cross Site Request Forgery (CSRF) attacks. The security vulnerability could be exploited by an attacker that is able to trigger requests of a logged-in user to the application. The vulnerability could allow switching the connectivity state of a user or a device. At the time of advisory publication no public exploitation of this security vulnerability was known.
Published: 2019-09-13T16:38:32.000Z
Updated: 2024-08-05T00:05:43.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13919 vulnerable 2026-06-08 05:12:52.419866 Details available
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some pages that should only be accessible by a privileged user can also be accessed by a non-privileged user. The security vulnerability could be exploited by an attacker with network access and valid credentials for the web interface. No user interaction is required. The vulnerability could allow an attacker to access information that he should not be able to read. The affected information does not include passwords. At the time of advisory publication no public exploitation of this security vulnerability was known.
Published: 2019-09-13T16:38:32.000Z
Updated: 2024-08-05T00:05:44.034Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13918 vulnerable 2026-06-08 05:12:52.416730 Details available
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). The web interface has no means to prevent password guessing attacks. The vulnerability could be exploited by an attacker with network access to the vulnerable software, requiring no privileges and no user interaction. The vulnerability could allow full access to the web interface. At the time of advisory publication no public exploitation of this security vulnerability was known.
Published: 2019-09-13T16:38:32.000Z
Updated: 2024-08-05T00:05:43.862Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.