CVE-2024-42345

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2). The affected application does not properly handle user session establishment and invalidation. This could allow a remote attacker to circumvent the additional multi factor authentication for user session establishment.

Score

CVSS 4.0 5.3 Medium

Status

Analyzed - productcert@siemens.com

Published

2024-09-10

Last modified

2024-09-10

Weaknesses

CWE-384

Affected products

• Sinema Remote Connect Server (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-869574.html