CVE-2024-42345 | THREATINT

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2). The affected application does not properly handle user session establishment and invalidation. This could allow a remote attacker to circumvent the additional multi factor authentication for user session establishment.

Reserved 2024-07-30 | Published 2024-09-10 | Updated 2024-09-10 | Assigner siemens

MEDIUM: 4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C

MEDIUM: 5.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-384: Session Fixation

Product status

Default status

unknown

Any version before V3.2 SP2

affected

References

cert-portal.siemens.com/productcert/html/ssa-869574.html

cve.org (CVE-2024-42345)

nvd.nist.gov (CVE-2024-42345)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.