CVE-2024-39570: Command Injection
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are vulnerable to command injection due to missing server side input sanitation when loading VxLAN configurations. This could allow an authenticated attacker to execute arbitrary code with root privileges.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39570?
CVE-2024-39570 is considered a high severity vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2024-39570?
To fix CVE-2024-39570, upgrade to Siemens SINEMA Remote Connect Server version 3.2 HF1 or later.
Which versions of SINEMA Remote Connect Server are affected by CVE-2024-39570?
All versions of Siemens SINEMA Remote Connect Server prior to 3.2 HF1 are affected by CVE-2024-39570.
What type of attack does CVE-2024-39570 enable?
CVE-2024-39570 enables authenticated attackers to perform command injection, allowing them to execute arbitrary code.
Is user authentication required to exploit CVE-2024-39570?
Yes, an attacker must be authenticated to exploit CVE-2024-39570 due to the nature of the command injection vulnerability.