PT-2024-5098 · Siemens · Sinema Remote Connect Server

Published 2024-07-09 · Updated 2024-09-06 · CVE-2024-39570

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.2 HF1

Description: A vulnerability has been identified in SINEMA Remote Connect Server due to missing server-side input sanitation when loading VxLAN configurations. This could allow an authenticated attacker to execute arbitrary code with root privileges. The issue is related to command injection and affects applications that do not properly sanitize input on the server side.

Recommendations: For versions prior to V3.2 HF1, update to version V3.2 HF1 or later to resolve the issue. As a temporary workaround, consider restricting access to VxLAN configurations to minimize the risk of exploitation. Additionally, ensure that all input is properly sanitized on the server side to prevent command injection attacks.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2024-05625

CVE-2024-39570

Affected Products

Sinema Remote Connect Server

References · 8

• https://cert-portal.siemens.com/productcert/html/ssa-928781.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05625 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-39570 · Security Note
• https://osv.dev/vulnerability/CVE-2024-39570 · Vendor Advisory
• https://t.me/cvedetector/343 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1810708679357870390 · Twitter Post
• https://twitter.com/CVEnew/status/1810651987865936149 · Twitter Post
• https://twitter.com/CveFindCom/status/1810788870276988940 · Twitter Post