VULNERABILITY INTELLIGENCE

CVE-2024-39868

CVSS score7.6 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2024-07-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain actions in the web interface allowing an unauthenticated attacker to access and edit VxLAN configuration information of networks for which they have no privileges.

Weakness classification

  • productcert@siemens.com: CWE-425
  • nvd@nist.gov: CWE-425

Primary references