CVE-2024-39567: Command Injection
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39567?
CVE-2024-39567 is considered a medium severity vulnerability due to its potential for command injection.
How do I fix CVE-2024-39567?
To fix CVE-2024-39567, upgrade to SINEMA Remote Connect Client version 3.2 HF1 or later.
Who is affected by CVE-2024-39567?
CVE-2024-39567 affects all versions of the Siemens SINEMA Remote Connect Client prior to version 3.2 HF1.
What type of attack does CVE-2024-39567 enable?
CVE-2024-39567 enables authenticated local attackers to perform command injection attacks.
What are the consequences of CVE-2024-39567?
The consequences of CVE-2024-39567 may include unauthorized command execution on the affected system.