Sinema Remote Connect Server (Siemens) - vulnerabilities (CVEs)

71 CVEs, 0 in the last 30 days, 19 known versions, newest CVE from 2025-12-09. Vendor: Siemens.

CVEs of Sinema Remote Connect Server

CVE-2025-40819 - CVSS 4.3 (medium), 2025-12-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications do not properly validate license…
CVE-2025-40818 - CVSS 3.3 (low), 2025-12-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications contain private SSL/TLS keys on the…
CVE-2024-42345 - CVSS 5.3 (medium), 2024-09-10: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2). The affected application does not properly handle user session…
CVE-2024-39876 - CVSS 5.3 (medium), 2024-07-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly handle log rotation. This…
CVE-2024-39874 - CVSS 8.7 (high), 2024-07-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute…
CVE-2024-39873 - CVSS 8.7 (high), 2024-07-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute…
CVE-2024-39872 - CVSS 9.9 (critical), 2024-07-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly assign rights to…
CVE-2024-39875 - CVSS 5.3 (medium), 2024-07-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows authenticated, low privilege…
CVE-2024-39868 - CVSS 7.6 (high), 2024-07-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication…
CVE-2024-39871 - CVSS 6.3 (medium), 2024-07-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly separate the rights to…
CVE-2024-39870 - CVSS 7.8 (high), 2024-07-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected applications can be configured to allow users to…
CVE-2024-39869 - CVSS 7.1 (high), 2024-07-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected products allow to upload certificates. An…
CVE-2024-39867 - CVSS 7.6 (high), 2024-07-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication…
CVE-2024-39866 - CVSS 8.8 (high), 2024-07-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted…
CVE-2024-39865 - CVSS 8.8 (high), 2024-07-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted…
CVE-2024-39571 - CVSS 8.8 (high), 2024-07-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are vulnerable to command injection due…
CVE-2024-39570 - CVSS 8.8 (high), 2024-07-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are vulnerable to command injection due…
CVE-2024-6387 - CVSS 8.1 (high), 2024-07-01: A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an…
CVE-2022-32257 - CVSS 9.8 (critical), 2024-03-12: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web service that lacks…
CVE-2022-32260 - CVSS 9.8 (critical), 2022-06-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application creates temporary user credentials for…
CVE-2022-32259 - CVSS 6.5 (medium), 2022-06-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for installation or update of the affected…
CVE-2022-32262 - CVSS 9.8 (critical), 2022-06-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a file upload server that is…
CVE-2022-32258 - CVSS 7.5 (high), 2022-06-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains an older feature that allows to…
CVE-2022-32261 - CVSS 7.5 (high), 2022-06-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a misconfiguration in the APT…
CVE-2022-32253 - CVSS 7.5 (high), 2022-06-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). Due to improper input validation, the OpenSSL certificate's…
CVE-2022-32256 - CVSS 6.5 (medium), 2022-06-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web service that lacks…
CVE-2022-27221 - CVSS 5.9 (medium), 2022-06-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An attacker in machine-in-the-middle could obtain plaintext secret…
CVE-2022-32252 - CVSS 7.8 (high), 2022-06-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The application does not perform the integrity check of the update…
CVE-2022-32255 - CVSS 5.3 (medium), 2022-06-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web service that lacks…
CVE-2022-32251 - CVSS 9.8 (critical), 2022-06-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). There is a missing authentication verification for a resource used…
CVE-2022-32254 - CVSS 7.5 (high), 2022-06-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). A customized HTTP POST request could force the application to write…
CVE-2022-29034 - CVSS 6.1 (medium), 2022-06-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An error message pop up window in the web interface of the affected…
CVE-2022-27220 - CVSS 4.3 (medium), 2022-06-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is missing general HTTP security headers…
CVE-2022-27219 - CVSS 4.3 (medium), 2022-06-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is missing general HTTP security headers…
CVE-2022-0778 - CVSS 7.5 (high), 2022-03-15: The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this…
CVE-2022-25314 - CVSS 7.5 (high), 2022-02-18: In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.
CVE-2022-25313 - CVSS 6.5 (medium), 2022-02-18: In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.
CVE-2022-25315 - CVSS 9.8 (critical), 2022-02-18: In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
CVE-2022-25235 - CVSS 9.8 (critical), 2022-02-16: xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain…
CVE-2022-25236 - CVSS 9.8 (critical), 2022-02-16: xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
CVE-2022-23102 - CVSS 6.1 (medium), 2022-02-09: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An…
CVE-2022-23990 - CVSS 7.5 (high), 2022-01-26: Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.
CVE-2022-23852 - CVSS 9.8 (critical), 2022-01-24: Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
CVE-2022-22827 - CVSS 8.8 (high), 2022-01-10: storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVE-2022-22826 - CVSS 8.8 (high), 2022-01-10: nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVE-2022-22823 - CVSS 9.8 (critical), 2022-01-10: build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVE-2022-22822 - CVSS 9.8 (critical), 2022-01-10: addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVE-2022-22825 - CVSS 8.8 (high), 2022-01-10: lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVE-2022-22824 - CVSS 9.8 (critical), 2022-01-10: defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVE-2021-46143 - CVSS 8.1 (high), 2022-01-06: In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
CVE-2021-45960 - CVSS 8.8 (high), 2022-01-01: In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g.,…
CVE-2021-41991 - CVSS 7.5 (high), 2021-10-18: The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the…
CVE-2021-34798 - CVSS 7.5 (high), 2021-09-16: Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVE-2021-40438 - CVSS 9 (critical), 2021-09-16: A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server…
CVE-2021-37192 - CVSS 4.3 (medium), 2021-09-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information disclosure…
CVE-2021-37191 - CVSS 4.3 (medium), 2021-09-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected…
CVE-2021-37193 - CVSS 4.3 (medium), 2021-09-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected…
CVE-2021-37183 - CVSS 6.5 (medium), 2021-09-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software allows sending send-to-sleep…
CVE-2021-37177 - CVSS 6.5 (medium), 2021-09-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The status provided by the syslog clients managed by the…
CVE-2021-37190 - CVSS 4.3 (medium), 2021-09-14: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information disclosure…
CVE-2021-3712 - CVSS 7.4 (high), 2021-08-24: ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the…
CVE-2021-22925 - CVSS 5.3 (medium), 2021-08-05: curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs…
CVE-2021-22924 - CVSS 3.7 (low), 2021-08-05: libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic,…
CVE-2021-20093 - CVSS 9.1 (critical), 2021-06-16: A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap…
CVE-2020-25240 - CVSS 8.8 (high), 2021-03-15: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). Unpriviledged users can access services when guessing the url. An…
CVE-2020-25239 - CVSS 8.8 (high), 2021-03-15: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). The webserver could allow unauthorized actions via special urls for…
CVE-2020-7595 - CVSS 7.5 (high), 2020-01-21: xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
CVE-2019-19956 - CVSS 7.5 (high), 2019-12-24: xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.
CVE-2019-13922 - CVSS 2.7 (low), 2019-09-13: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). An attacker with administrative privileges can obtain the hash…
CVE-2019-13920 - CVSS 4.3 (medium), 2019-09-13: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some parts of the web application are not protected against…
CVE-2019-13919 - CVSS 4.3 (medium), 2019-09-13: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some pages that should only be accessible by a privileged user…
CVE-2019-13918 - CVSS 9.8 (critical), 2019-09-13: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). The web interface has no means to prevent password guessing…
CVE-2019-6570 - CVSS 8.8 (high), 2019-04-17: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attacker may…
CVE-2016-6204 - CVSS 6.1 (medium), 2016-07-22: Cross-site scripting (XSS) vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject…