CVE-2024-39867
First published: Tue Jul 09 2024(Updated: )
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain actions in the web interface allowing an unauthenticated attacker to access and edit device configuration information of devices for which they have no privileges.
Credit: productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens SINEMA Remote Connect | <3.2 | |
| Siemens SINEMA Remote Connect | =3.2 | |
| Siemens SINEMA Remote Connect | =3.2-hf1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-39867?
CVE-2024-39867 is categorized as a high-severity vulnerability due to unauthorized access risks.
How do I fix CVE-2024-39867?
To fix CVE-2024-39867, upgrade to Siemens SINEMA Remote Connect Server version 3.2 SP1 or later.
Who is affected by CVE-2024-39867?
CVE-2024-39867 affects all versions of Siemens SINEMA Remote Connect Server prior to version 3.2 SP1.
What type of attacks can exploit CVE-2024-39867?
CVE-2024-39867 can be exploited by unauthenticated attackers to gain unauthorized access and edit device configuration.
What actions can unauthenticated attackers perform with CVE-2024-39867?
Unauthenticated attackers can access and modify device configuration information through the web interface due to CVE-2024-39867.
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/siemens
- canonical/siemens sinema remote connect
- version/siemens sinema remote connect/3.2
- version/siemens sinema remote connect/3.2-hf1