High severity · published Jul 9, 2024
CVE-2024-39865
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)
8.8
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. As part of this backup, files can be restored without correctly checking the path of the restored file. This could allow an attacker with access to the backup encryption key to upload malicious files, that could potentially lead to remote code execution.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SR
Sinema Remote Connect Server · Siemens
before 3.2; 3.2; 3.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-39865
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-39865
Patch
https://cert-portal.siemens.com/productcert/html/ssa-381581.html
More from Sinema Remote Connect Server
9.0
CVE-2021-40438
mod_proxy SSRF
9.9
CVE-2024-39872
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)
9.8
CVE-2022-32257
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2)
9.8
CVE-2022-32262
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1)
9.8
CVE-2022-32260
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)