CVE-2024-39872
First published: Tue Jul 09 2024(Updated: )
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly assign rights to temporary files created during its update process. This could allow an authenticated attacker with the 'Manage firmware updates' role to escalate their privileges on the underlying OS level.
Credit: productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens SINEMA Remote Connect | <3.2 | |
| Siemens SINEMA Remote Connect | =3.2 | |
| Siemens SINEMA Remote Connect | =3.2-hf1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-39872?
CVE-2024-39872 is classified as a high-severity vulnerability due to the potential for authenticated attackers to escalate privileges.
How do I fix CVE-2024-39872?
To remediate CVE-2024-39872, upgrade the SINEMA Remote Connect Server to version 3.2 SP1 or later.
Who is affected by CVE-2024-39872?
CVE-2024-39872 affects all versions of SINEMA Remote Connect Server prior to version 3.2 SP1.
What is the impact of CVE-2024-39872?
The impact of CVE-2024-39872 allows an authenticated attacker with the 'Manage firmware updates' role to escalate privileges.
Is there a workaround for CVE-2024-39872 before applying a fix?
Currently, there are no published workarounds for CVE-2024-39872, so applying the update is recommended.
- agent/references
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/siemens
- canonical/siemens sinema remote connect
- version/siemens sinema remote connect/3.2
- version/siemens sinema remote connect/3.2-hf1