CVE-2024-39873

published 2024-07-09

CVE-2024-39873: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force…

high 8.7 CVSS 4.0

AV N AC L AT N PR N UI N VC H VI N VA N SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against user credentials in its web API. This could allow an attacker to learn user credentials that are vulnerable to brute force attacks.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
siemens	sinema_remote_connect_server	< V3.2 SP1	V3.2 SP1
siemens	sinema_remote_connect_server	< 3.2	3.2
siemens	sinema_remote_connect_server	—	—

CWE-307