CVE-2021-37193

Опубликовано: 14 сент. 2021

Источник: nvd

CVSS3: 4.3

CVSS2: 3.3

EPSS Низкий

Описание

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected system could manipulate certain parameters and set a valid user of the affected software as invalid (or vice-versa).

Ссылки

https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf
Patch
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*

Версия до 3.0 (исключая)

cpe:2.3:a:siemens:sinema_remote_connect_server:3.0:-:*:*:*:*:*:*

cpe:2.3:a:siemens:sinema_remote_connect_server:3.0:sp1:*:*:*:*:*:*

EPSS

Процентиль: 28%

0.00103

Низкий

4.3 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-471

Связанные уязвимости

GHSA-6853-5v4j-v7vg