Known vulnerabilities in SINEMA Remote Connect Server

Vendor: Siemens
Software: SINEMA Remote Connect Server
Software CPE: cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 60
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SINEMA Remote Connect Server SINEMA Remote Connect Server is affected by 60 known vulnerabilities: 14 high, 27 medium, 19 low Critical High Medium Low

Vulnerabilities (60)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97147 - Session Fixation
CVE-2024-42345		 CWE-384 Low
No
No
 3.2 SP2 11.09.2024 SB2024091122
#VU94115 - Command injection
CVE-2024-39571		 CWE-77 Medium
No
No
 3.2 HF1 11.07.2024 SB2024071137
#VU94114 - Command injection
CVE-2024-39570		 CWE-77 Medium
No
No
 3.2 HF1 11.07.2024 SB2024071137
#VU92938 - Resource Management Errors
CVE-2024-28882		 CWE-399 Low
No
No
 3.2 SP3 20.06.2024 SB20240620213
SB2024062132
SB2024070301
and 5 more
#VU92937 - Resource exhaustion
CVE-2024-5594		 CWE-400 Low
No
No
 3.2 SP3 20.06.2024 SB20240620213
SB2024062132
SB2024070301
and 8 more
#VU87580 - Improper Access Control
CVE-2022-32257		 CWE-284 High
No
No
 3.2 18.03.2024 SB2024031815
#VU80757 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-23064		 CWE-79 Medium
No
No
 3.1 13.09.2023 SB2023091344
SB2023100512
SB2024010320
and 11 more
#VU64442 - Incorrect User Management
CVE-2022-32260		 CWE-286 Low
No
No
 3.1 16.06.2022 SB2022061614
#VU64441 - Exposure of sensitive information to an unauthorized actor
CVE-2022-32259		 CWE-200 Medium
No
No
 3.1 16.06.2022 SB2022061614
#VU64439 - Obsolete Feature in UI
CVE-2022-32258		 CWE-448 Medium
No
No
 3.1 16.06.2022 SB2022061614
#VU64437 - Improper Access Control
CVE-2022-32256		 CWE-284 Low
No
No
 3.1 16.06.2022 SB2022061614
#VU64435 - Improper Access Control
CVE-2022-32255		 CWE-284 Medium
No
No
 3.1 16.06.2022 SB2022061614
#VU64432 - Information Exposure Through Log Files
CVE-2022-32254		 CWE-532 Low
No
No
 3.1 16.06.2022 SB2022061614
#VU64431 - Improper input validation
CVE-2022-32253		 CWE-20 Low
No
No
 3.1 16.06.2022 SB2022061614
#VU64429 - Insufficient Verification of Data Authenticity
CVE-2022-32252		 CWE-345 Low
No
No
 3.1 16.06.2022 SB2022061614
#VU64428 - Cryptographic Issues
CVE-2022-27221		 CWE-310 Medium
No
No
 3.1 16.06.2022 SB2022061614
#VU64427 - Command injection
CVE-2022-32262		 CWE-77 Medium
No
No
 3.1 16.06.2022 SB2022061614
#VU64426 - Missing Authentication for Critical Function
CVE-2022-32251		 CWE-306 Medium
No
No
 3.1 16.06.2022 SB2022061614
#VU64425 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-29034		 CWE-79 Low
No
No
 3.1 16.06.2022 SB2022061614
#VU55146 - Improper Certificate Validation
CVE-2021-22924		 CWE-295 Medium
No
No
 3.1 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 33 more


Showing elements 1 - 20 out of 60