PT-2024-8750 · Siemens · Sinema Remote Connect Server

Published 2024-07-09 · Updated 2024-09-09 · CVE-2024-39873

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V3.2 SP1

Description The issue is related to insufficient restriction of authentication attempts, allowing a remote attacker to obtain encrypted user credentials. The affected application does not properly implement brute force protection against user credentials in its web API, making user credentials vulnerable to brute force attacks.

Recommendations For versions prior to V3.2 SP1, update to version V3.2 SP1 or later to resolve the issue. As a temporary workaround, consider restricting access to the web API to minimize the risk of exploitation. Avoid using weak user credentials in the affected application until the issue is resolved.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

BDU:2024-10354

CVE-2024-39873

Affected Products

Sinema Remote Connect Server

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-39873 · Security Note
• https://osv.dev/vulnerability/CVE-2024-39873 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-381581.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10354 · Security Note
• https://t.me/cvedetector/331 · Telegram Post
• https://vuldb.com/?id.270660 · Note
• https://twitter.com/CVEnew/status/1810651974351941789 · Twitter Post
• https://twitter.com/CveFindCom/status/1810735979969286433 · Twitter Post