Paper/Archive/CVE-2024-39872

CVE-2024-39872

Siemens SINEMA Remote Connect Server — A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).

EPSS 0.5%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (NVD)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 41.0.410 × 208.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly assign rights to temporary files created during its update process. This could allow an authenticated attacker with the 'Manage firmware updates' role to escalate their privileges on the underlying OS level.

Affected

ProductAffectedFixed inSource

SINEMA Remote Connect Server< V3.2 SP1V3.2 SP1CNA

sinema_remote_connect_server< 3.2_sp13.2_sp1CISA-ADP

Scores by source

NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

siemens (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C

siemens (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:H/SA:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcert-portal.siemens.com/productcert/html/ssa-381581.html