PT-2024-5080 · Siemens · Sinema Remote Connect Client

Published 2024-07-09 · Updated 2024-09-06 · CVE-2024-39569

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Client versions prior to V3.2 HF1

Description: A vulnerability has been identified in the system service of affected applications, which is vulnerable to command injection due to missing server-side input sanitation when loading VPN configurations. This could allow an administrative remote attacker running a corresponding SINEMA Remote Connect Server to execute arbitrary code with system privileges on the client system.

Recommendations: For versions prior to V3.2 HF1, update to version V3.2 HF1 or later to resolve the issue. As a temporary workaround, consider restricting access to the system service of affected applications to minimize the risk of exploitation. Avoid using the vulnerable system service until the issue is resolved.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2024-05607

CVE-2024-39569

Affected Products

Sinema Remote Connect Client

References · 7

• https://cert-portal.siemens.com/productcert/html/ssa-868282.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-39569 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05607 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-39569 · Security Note
• https://twitter.com/VulmonFeeds/status/1810708426315497977 · Twitter Post
• https://twitter.com/CVEnew/status/1810651989094891907 · Twitter Post
• https://t.me/cvedetector/341 · Telegram Post