PT-2024-7956 · Siemens · Sinema Remote Connect Server

Published 2024-07-09 · Updated 2024-09-06 · CVE-2024-39871

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V3.2 SP1

Description The issue is related to improper authorization. It allows a remote attacker to gain unauthorized access to participant groups they should not have access to. The vulnerability exploits the lack of proper separation of rights for editing device settings and communication relations settings. This could enable an authenticated attacker with device management permissions to access groups they do not belong to.

Recommendations For versions prior to V3.2 SP1, update to version V3.2 SP1 or later to resolve the issue. As a temporary workaround, consider restricting access to device management and communication relations settings to minimize the risk of exploitation.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2024-09469

CVE-2024-39871

Affected Products

Sinema Remote Connect Server

References · 8

• https://cert-portal.siemens.com/productcert/html/ssa-381581.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39871 · Security Note
• https://osv.dev/vulnerability/CVE-2024-39871 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09469 · Security Note
• https://feedly.com/cve/CVE-2024-39871 · Note
• https://github.com/advisories/GHSA-45v2-7387-4mj3 · Note
• https://twitter.com/CVEnew/status/1810651976834974126 · Twitter Post
• https://t.me/cvedetector/333 · Telegram Post