PT-2024-5081 · Siemens · Sinema Remote Connect Client

Published 2024-07-09 · Updated 2024-09-06 · CVE-2024-39568

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Client versions prior to V3.2 HF1

Description: The issue is related to the lack of data sanitization on the management level, which can allow an attacker to execute arbitrary code with system privileges. Specifically, the system service of affected applications is vulnerable to command injection due to missing server-side input sanitation when loading proxy configurations. This could enable an authenticated local attacker to execute arbitrary code with system privileges.

Recommendations: For versions prior to V3.2 HF1, update to version V3.2 HF1 or later to resolve the issue. As a temporary workaround, consider restricting access to the system service of affected applications to minimize the risk of exploitation. Avoid using vulnerable proxy configurations in the affected API endpoints until the issue is resolved.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2024-05608

CVE-2024-39568

Affected Products

Sinema Remote Connect Client

References · 8

• https://cert-portal.siemens.com/productcert/html/ssa-868282.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-39568 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39568 · Security Note
• https://bdu.fstec.ru/vul/2024-05608 · Security Note
• https://t.me/cvedetector/344 · Telegram Post
• https://twitter.com/CVEnew/status/1810651990239924420 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1810685602926379133 · Twitter Post
• https://twitter.com/CveFindCom/status/1810796437665427457 · Twitter Post