PT-2024-7812 · Siemens · Sinema Remote Connect Client

Lloyd Post · Published 2024-09-10 · Updated 2024-09-10 · CVE-2024-32006

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Client versions prior to V3.2 SP2

Description A vulnerability has been identified in the SINEMA Remote Connect Client, where the affected application does not expire the user session on reboot without logout. This could allow an attacker to bypass Multi-Factor Authentication. The issue is related to the incorrect session expiration in the Time-based One-Time Password (TOTP) algorithm of the client.

Recommendations For versions prior to V3.2 SP2, update to version V3.2 SP2 or later to resolve the issue. As a temporary workaround, consider manually expiring user sessions after reboot or implementing additional authentication measures to minimize the risk of exploitation.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

BDU:2024-09312

CVE-2024-32006

Affected Products

Sinema Remote Connect Client

References · 9

• https://cert-portal.siemens.com/productcert/html/ssa-417159.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-32006 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09312 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-32006 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-24-256-10 · Note
• https://twitter.com/CVEnew/status/1833443217640976806 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1833498076583022779 · Twitter Post
• https://t.me/cvedetector/5223 · Telegram Post
• https://github.com/advisories/GHSA-5v93-w7mf-hc4q · Note