SS
Product
Sinema Server
On CISA KEVExploited in the wildRansomware-linked
16
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 4High 5Medium 4Low 0
Watch
Add Sinema Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-40438 RansomwareIn wildKEV | 9.0 | Sep 16 | mod_proxy SSRF Affected: 14.0 |
| CVE-2019-10940 | 9.9 | Jan 16 | A vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1) Affected: before 14.0; 14.0; 14.0; 14.0 |
| CVE-2021-39275 | 9.8 | Sep 16 | ap_escape_quotes() may write beyond the end of a buffer when given malicious input Affected: 14.0 |
| CVE-2023-35796 | 9.0 | Oct 10 | A vulnerability has been identified in SINEMA Server V14 (All versions) Affected: 14.0 |
| CVE-2020-25237 | 8.1 | Feb 9 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2) Affected: before 14.0; 14.0; 14.0; 14.0; 14.0 |
| CVE-2016-6486 | 7.8 | Aug 8 | Siemens SINEMA Server uses weak permissions for the application folder, which allows local users to gain privileges via unspecified vectors Affected: All versions, or not specified |
| CVE-2021-34798 | 7.5 | Sep 16 | Malformed requests may cause the server to dereference a NULL pointer Affected: 14.0 |
| CVE-2019-6575 | 7.5 | Apr 17 | A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl Affected: All versions, or not specified |
| CVE-2022-25311 | 7.3 | Mar 8 | A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions) Affected: 14.0 |
| CVE-2020-7580 | 6.7 | Jun 10 | A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15… Affected: All versions, or not specified |
| CVE-2017-6865 | 6.5 | May 11 | A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions <… Affected: All versions, or not specified |
| CVE-2016-7165 | 6.4 | Nov 15 | A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2), SIMATIC NET PC-Software… Affected: through 13.0 |
| CVE-2019-10941 | 5.3 | Sep 14 | A vulnerability has been identified in SINEMA Server (All versions < V14 SP3) Affected: before 14.0; 14.0; 14.0; 14.0 |
| CVE-2014-2733 | – | Apr 19 | Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service (web-interface outage) via crafted HTTP requests to port (1) 4999 or (2) 80 Affected: through 12.0 |
| CVE-2014-2732 | – | Apr 19 | Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic… Affected: through 12.0 |
| CVE-2014-2731 | – | Apr 19 | Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port… Affected: through 12.0 |
Showing 16