PT-2024-5099 · Siemens · Sinema Remote Connect Server

Published 2024-07-09 · Updated 2024-09-06 · CVE-2024-39571

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.2 HF1

Description: A vulnerability has been identified due to missing server-side input sanitation when loading SNMP configurations, allowing command injection. This could enable an attacker with the right to modify the SNMP configuration to execute arbitrary code with root privileges. The issue is related to the lack of data cleaning measures on the management level, which can be exploited by a remote attacker to execute arbitrary code with root privileges.

Recommendations: For versions prior to V3.2 HF1, update to V3.2 HF1 or later to prevent unauthorized code execution. As a temporary workaround, consider restricting access to the SNMP configuration to minimize the risk of exploitation. Avoid using the vulnerable SNMP configuration loading functionality until the issue is resolved.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2024-05626

CVE-2024-39571

Affected Products

Sinema Remote Connect Server

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-39571 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-928781.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05626 · Security Note
• https://osv.dev/vulnerability/CVE-2024-39571 · Vendor Advisory
• https://twitter.com/CveFindCom/status/1810781119912050798 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1810692184514969858 · Twitter Post
• https://twitter.com/CVEnew/status/1810651986670547274 · Twitter Post
• https://t.me/cvedetector/342 · Telegram Post