PT-2024-5082 · Siemens · Sinema Remote Connect Client

Published 2024-07-09 · Updated 2024-07-09 · CVE-2024-39567

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Client versions prior to V3.2 HF1

Description: A vulnerability has been identified in the system service of affected applications, which is vulnerable to command injection due to missing server-side input sanitation when loading VPN configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges.

Recommendations: For versions prior to V3.2 HF1, update to version V3.2 HF1 or later to resolve the issue. As a temporary workaround, consider restricting access to the system service to minimize the risk of exploitation. Avoid using the vulnerable system service until the issue is resolved.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2024-05609

CVE-2024-39567

Affected Products

Sinema Remote Connect Client

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-39567 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-868282.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05609 · Security Note
• https://osv.dev/vulnerability/CVE-2024-39567 · Vendor Advisory
• https://twitter.com/CVEnew/status/1810651991435354575 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1810701063386702187 · Twitter Post
• https://support.industry.siemens.com/cs/ww/en/view/109954687 · Note
• https://twitter.com/CveFindCom/status/1810796495534231655 · Twitter Post