CVE-2024-39873

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against user credentials in its web API. This could allow an attacker to learn user credentials that are vulnerable to brute force attacks.

Score

CVSS 4.0 8.7 High

Status

Modified - productcert@siemens.com

Published

2024-07-09

Last modified

2025-08-27

Weaknesses

CWE-307

Affected products

• Sinema Remote Connect Server (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-381581.html