SINEMA Remote Connect Server vulnerabilities | LiveThreat CVE Feed

Product

SINEMA Remote Connect Server

by Siemens · last CVE Dec 9, 2025

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities72 In the news0 Timeline

Severity mix

Critical 15High 29Medium 25Low 3

Severity

All severities72 Critical15 High29 Medium25 Low3

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add SINEMA Remote Connect Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-40438 RansomwareIn wildKEV	9.0	100%	Sep 16	mod_proxy SSRF Affected: before 3.1; 3.2
CVE-2024-39872	9.9	0%	Jul 9	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1) Affected: before 3.2; 3.2; 3.2
CVE-2022-32257	9.8	1%	Mar 12	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2) Affected: before 3.2
CVE-2022-32262	9.8	3%	Jun 14	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1) Affected: before 3.1
CVE-2022-32260	9.8	1%	Jun 14	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1) Affected: before 3.1
CVE-2022-32251	9.8	1%	Jun 14	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1) Affected: before 3.1
CVE-2022-25315	9.8	5%	Feb 18	In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames Affected: before 3.1
CVE-2022-25235	9.8	5%	Feb 16	xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context Affected: before 3.1
CVE-2022-25236	9.8	35%	Feb 16	xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs Affected: before 3.1
CVE-2022-23852	9.8	5%	Jan 24	Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES Affected: before 3.1
CVE-2022-22822	9.8	5%	Jan 8	addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow Affected: before 3.1
CVE-2022-22823	9.8	4%	Jan 8	build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow Affected: before 3.1
CVE-2022-22824	9.8	4%	Jan 8	defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow Affected: before 3.1
CVE-2019-13918	9.8	2%	Sep 13	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1) Affected: before 2.0; 2.0; 2.0
CVE-2021-20093	9.1	33%	Jun 16	A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a Affected: before 3.0; 3.0; 3.0
CVE-2024-39866	8.8	0%	Jul 9	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1) Affected: before 3.2; 3.2; 3.2
CVE-2024-39865	8.8	0%	Jul 9	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1) Affected: before 3.2; 3.2; 3.2
CVE-2024-39571	8.8	1%	Jul 9	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1) Affected: before 3.2; 3.2
CVE-2024-39570	8.8	1%	Jul 9	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1) Affected: before 3.2; 3.2
CVE-2022-22825	8.8	3%	Jan 8	lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow Affected: before 3.1
CVE-2022-22826	8.8	3%	Jan 8	nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow Affected: before 3.1
CVE-2022-22827	8.8	3%	Jan 8	storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow Affected: before 3.1
CVE-2021-45960	8.8	5%	Jan 1	In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes,… Affected: before 3.1
CVE-2020-25240	8.8	1%	Mar 15	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0) Affected: before 3.0
CVE-2020-25239	8.8	1%	Mar 15	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0) Affected: before 3.0
CVE-2019-6570	8.8	1%	Apr 17	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0) Affected: before 2.0
CVE-2024-6387	8.1	100%	Jul 1	Openssh: regresshion - race condition in ssh allows rce/dos Affected: before V3.2 SP2
CVE-2024-39870	7.8	0%	Jul 9	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1) Affected: before 3.2; 3.2; 3.2
CVE-2022-32252	7.8	0%	Jun 14	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1) Affected: before 3.1
CVE-2021-46143	7.8	4%	Jan 6	In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize Affected: before 3.1
CVE-2024-39874	7.5	0%	Jul 9	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1) Affected: before 3.2; 3.2; 3.2
CVE-2024-39873	7.5	0%	Jul 9	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1) Affected: before 3.2; 3.2; 3.2
CVE-2022-32261	7.5	1%	Jun 14	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1) Affected: before 3.1
CVE-2022-32258	7.5	1%	Jun 14	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1) Affected: before 3.1
CVE-2022-32254	7.5	1%	Jun 14	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1) Affected: before 3.1
CVE-2022-32253	7.5	1%	Jun 14	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1) Affected: before 3.1
CVE-2022-25314	7.5	5%	Feb 18	In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString Affected: before 3.1
CVE-2022-23990	7.5	5%	Jan 26	Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function Affected: before 3.1
CVE-2021-41991	7.5	5%	Oct 18	The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later… Affected: All versions, or not specified
CVE-2021-34798	7.5	65%	Sep 16	Malformed requests may cause the server to dereference a NULL pointer Affected: before 3.1
CVE-2020-7595	7.5	8%	Jan 21	xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation Affected: before 3.0
CVE-2019-19956	7.5	6%	Dec 24	xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs Affected: before 3.0
CVE-2024-39868	7.3	0%	Jul 9	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1) Affected: before 3.2; 3.2; 3.2
CVE-2024-39867	7.3	0%	Jul 9	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1) Affected: before 3.2; 3.2; 3.2
CVE-2024-39869	6.5	0%	Jul 9	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1) Affected: before 3.2; 3.2; 3.2
CVE-2022-32259	6.5	1%	Jun 14	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1) Affected: before 3.1
CVE-2022-32256	6.5	1%	Jun 14	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1) Affected: before 3.1
CVE-2022-25313	6.5	3%	Feb 18	In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element Affected: before 3.1
CVE-2021-37183	6.5	0%	Sep 14	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2) Affected: before 3.0; 3.0; 3.0
CVE-2021-37177	6.5	0%	Sep 14	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2) Affected: before 3.0; 3.0; 3.0