CVE-2024-39869: High severity siemens sinema remote connect vulnerability
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected products allow to upload certificates. An authenticated attacker could upload a crafted certificates leading to a permanent denial-of-service situation. In order to recover from such an attack, the offending certificate needs to be removed manually.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39869?
CVE-2024-39869 has a high severity rating due to its potential to cause a permanent denial-of-service condition.
How do I fix CVE-2024-39869?
To fix CVE-2024-39869, upgrade to Siemens SINEMA Remote Connect Server version 3.2 SP1 or later.
Who is affected by CVE-2024-39869?
CVE-2024-39869 affects all versions of Siemens SINEMA Remote Connect Server prior to version 3.2 SP1.
What type of attack is possible with CVE-2024-39869?
CVE-2024-39869 allows authenticated attackers to upload crafted certificates leading to a denial-of-service situation.
What are the consequences of exploiting CVE-2024-39869?
Exploiting CVE-2024-39869 can lead to a permanent denial-of-service, rendering the SINEMA Remote Connect Server inoperable.