CVE-2020-25239 | BDVDB-2026-150440 Detail

SiemensSINEMA Remote Connect Server

Description#

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). The webserver could allow unauthorized actions via special urls for unpriviledged users. The settings of the UMC authorization server could be changed to add a rogue server by an attacker authenticating with unprivilege user rights.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-863 Incorrect Authorization

References#

https://cert-portal.siemens.com/productcert/pdf/ssa-731317.pdf

Exploit#

No public exploit known

History#

Version 12021-03-15Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.