CVE-2024-39873

CWE-3073 documents3 sources
Severity
8.7HIGH
EPSS
0.4%
top 36.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Siemens Sinema Remote Connect Server
Timeline
PublishedJul 9

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against user credentials in its web API. This could allow an attacker to learn user credentials that are vulnerable to brute force attacks.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

Patches

Patch: cert-portal.siemens.com ↗Patch: cert-portal.siemens.com ↗

🔴Vulnerability Details

2
CVEList
CVE-2024-39873: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3↗2024-07-09
▶
GHSA
GHSA-px3v-xcrv-xvv7: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3↗2024-07-09
▶
CVE-2024-39873 (HIGH CVSS 8.7) | A vulnerability has been identified | cvebase.io