Updated 5 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,762exploited flaws on CISA’s list

34added in the last 30 days

324new WordPress flaws this week

390,007entries in the database

48 results

Dec 9, 2025A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4).CVE-2025-40819 · Other software · Siemens · reported by productcert@siemens.comMedium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications do not properly validate license restrictions against the database, allowing direct modification of the system_ticketinfo table to bypass license limitations without proper enforcement checks. This could allow with database access to circumvent licensing restrictions by directly modifying database values and potentially enabling unauthorized use beyond the permitted scope.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com
Dec 9, 2025A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4).CVE-2025-40818 · Other software · Siemens · reported by productcert@siemens.comLow 3.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications contain private SSL/TLS keys on the server that are not properly protected allowing any user with server access to read these keys. This could allow an authenticated attacker to impersonate the server potentially enabling man-in-the-middle, traffic decryption or unauthorized access to services that trust these certificates.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com
Sep 10, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2).CVE-2024-42345 · Other software · Siemens · reported by productcert@siemens.comMedium 5.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2). The affected application does not properly handle user session establishment and invalidation. This could allow a remote attacker to circumvent the additional multi factor authentication for user session establishment.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).CVE-2024-39876 · Other software · Siemens · reported by productcert@siemens.comMedium 5.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly handle log rotation. This could allow an unauthenticated remote attacker to cause a denial of service condition through resource exhaustion on the device.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).CVE-2024-39875 · Other software · Siemens · reported by productcert@siemens.comMedium 5.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows authenticated, low privilege users with the 'Manage own remote connections' permission to retrieve details about other users and group memberships.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).CVE-2024-39874 · Other software · Siemens · reported by productcert@siemens.comHigh 8.7
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against user credentials in its Client Communication component. This could allow an attacker to learn user credentials that are vulnerable to brute force attacks.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).CVE-2024-39873 · Other software · Siemens · reported by productcert@siemens.comHigh 8.7
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against user credentials in its web API. This could allow an attacker to learn user credentials that are vulnerable to brute force attacks.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).CVE-2024-39872 · Other software · Siemens · reported by productcert@siemens.comCritical 9.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly assign rights to temporary files created during its update process. This could allow an authenticated attacker with the 'Manage firmware updates' role to escalate their privileges on the underlying OS level.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).CVE-2024-39871 · Other software · Siemens · reported by productcert@siemens.comMedium 5.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly separate the rights to edit device settings and to edit settings for communication relations. This could allow an authenticated attacker with the permission to manage devices to gain access to participant groups that the attacked does not belong to.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).CVE-2024-39870 · Other software · Siemens · reported by productcert@siemens.comHigh 7.1
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected applications can be configured to allow users to manage own users. A local authenticated user with this privilege could use this modify users outside of their own scope as well as to escalate privileges.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).CVE-2024-39869 · Other software · Siemens · reported by productcert@siemens.comHigh 7.1
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected products allow to upload certificates. An authenticated attacker could upload a crafted certificates leading to a permanent denial-of-service situation. In order to recover from such an attack, the offending certificate needs to be removed manually.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).CVE-2024-39868 · Other software · Siemens · reported by productcert@siemens.comHigh 7.2
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain actions in the web interface allowing an unauthenticated attacker to access and edit VxLAN configuration information of networks for which they have no privileges.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).CVE-2024-39867 · Other software · Siemens · reported by productcert@siemens.comHigh 7.2
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain actions in the web interface allowing an unauthenticated attacker to access and edit device configuration information of devices for which they have no privileges.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).CVE-2024-39866 · Other software · Siemens · reported by productcert@siemens.comHigh 8.7
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with administrative privileges.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).CVE-2024-39865 · Other software · Siemens · reported by productcert@siemens.comHigh 8.7
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. As part of this backup, files can be restored without correctly checking the path of the restored file. This could allow an attacker with access to the backup encryption key to upload malicious files, that could potentially lead to remote code execution.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1).CVE-2024-39571 · Other software · Siemens · reported by productcert@siemens.comHigh 8.7
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are vulnerable to command injection due to missing server side input sanitation when loading SNMP configurations. This could allow an attacker with the right to modify the SNMP configuration to execute arbitrary code with root privileges.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1).CVE-2024-39570 · Other software · Siemens · reported by productcert@siemens.comHigh 8.7
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are vulnerable to command injection due to missing server side input sanitation when loading VxLAN configurations. This could allow an authenticated attacker to execute arbitrary code with root privileges.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Mar 12, 2024A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2).CVE-2022-32257 · Other software · Siemens · reported by productcert@siemens.comCritical 9.8
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to resources and potentially lead to code execution.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jun 14, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).CVE-2022-32262 · Other software · Siemens · reported by productcert@siemens.comHigh 8.8
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a file upload server that is vulnerable to command injection. An attacker could use this to achieve arbitrary code execution.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jun 14, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).CVE-2022-32261 · Other software · Siemens · reported by productcert@siemens.comMedium 5.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a misconfiguration in the APT update. This could allow an attacker to add insecure packages to the application.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jun 14, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).CVE-2022-32260 · Other software · Siemens · reported by productcert@siemens.comMedium 6.5
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application creates temporary user credentials for UMC (User Management Component) users. An attacker could use these temporary credentials for authentication bypass in certain scenarios.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jun 14, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).CVE-2022-32259 · Other software · Siemens · reported by productcert@siemens.comMedium 6.5
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for installation or update of the affected application contain unit test scripts with sensitive information. An attacker could gain information about testing architecture and also tamper with test configuration.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jun 14, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).CVE-2022-32258 · Other software · Siemens · reported by productcert@siemens.comMedium 5.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains an older feature that allows to import device configurations via a specific endpoint. An attacker could use this vulnerability for information disclosure.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jun 14, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).CVE-2022-32256 · Other software · Siemens · reported by productcert@siemens.comMedium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to low privileged users accessing privileged information.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jun 14, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).CVE-2022-32255 · Other software · Siemens · reported by productcert@siemens.comMedium 5.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to limited information.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jun 14, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).CVE-2022-32254 · Other software · Siemens · reported by productcert@siemens.comMedium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). A customized HTTP POST request could force the application to write the status of a given user to a log file, exposing sensitive user information that could provide valuable guidance to an attacker.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jun 14, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).CVE-2022-32253 · Other software · Siemens · reported by productcert@siemens.comMedium 4.9
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). Due to improper input validation, the OpenSSL certificate's password could be printed to a file reachable by an attacker.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jun 14, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).CVE-2022-32252 · Other software · Siemens · reported by productcert@siemens.comMedium 6.5
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The application does not perform the integrity check of the update packages. Without validation, an admin user might be tricked to install a malicious package, granting root privileges to an attacker.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jun 14, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).CVE-2022-32251 · Other software · Siemens · reported by productcert@siemens.comHigh 8.8
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). There is a missing authentication verification for a resource used to change the roles and permissions of a user. This could allow an attacker to change the permissions of any user and gain the privileges of an administrative user.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jun 14, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).CVE-2022-29034 · Other software · Siemens · reported by productcert@siemens.comMedium 6.1
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An error message pop up window in the web interface of the affected application does not prevent injection of JavaScript code. This could allow attackers to perform reflected cross-site scripting (XSS) attacks.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record packetstormsecurity.com seclists.org
Jun 14, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).CVE-2022-27221 · Other software · Siemens · reported by productcert@siemens.comMedium 5.9
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An attacker in machine-in-the-middle could obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a "BREACH" attack.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jun 14, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).CVE-2022-27220 · Other software · Siemens · reported by productcert@siemens.comMedium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is missing general HTTP security headers in the web server configured on port 6220. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jun 14, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).CVE-2022-27219 · Other software · Siemens · reported by productcert@siemens.comMedium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is missing general HTTP security headers in the web server configured on port 443. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Feb 9, 2022A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0).CVE-2022-23102 · Other software · Siemens · reported by productcert@siemens.comMedium 6.1
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious link there by leading to phishing attacks.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record packetstormsecurity.com seclists.org
Sep 14, 2021A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).CVE-2021-37193 · Other software · Siemens · reported by productcert@siemens.comMedium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected system could manipulate certain parameters and set a valid user of the affected software as invalid (or vice-versa).
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Sep 14, 2021A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).CVE-2021-37192 · Other software · Siemens · reported by productcert@siemens.comMedium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve a list of network devices a known user can manage.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Sep 14, 2021A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).CVE-2021-37191 · Other software · Siemens · reported by productcert@siemens.comMedium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected system could brute force the usernames from the affected software.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Sep 14, 2021A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).CVE-2021-37190 · Other software · Siemens · reported by productcert@siemens.comMedium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known user.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Sep 14, 2021A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).CVE-2021-37183 · Other software · Siemens · reported by productcert@siemens.comMedium 6.5
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software allows sending send-to-sleep notifications to the managed devices. An unauthenticated attacker in the same network of the affected system can abuse these notifications to cause a Denial-of-Service condition in the managed devices.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Sep 14, 2021A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).CVE-2021-37177 · Other software · Siemens · reported by productcert@siemens.comMedium 6.5
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The status provided by the syslog clients managed by the affected software can be manipulated by an unauthenticated attacker in the same network of the affected system.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Mar 15, 2021A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0).CVE-2020-25240 · Other software · Siemens · reported by productcert@siemens.comHigh 8.8
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). Unpriviledged users can access services when guessing the url. An attacker could impact availability, integrity and gain information from logs and templates of the service.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Mar 15, 2021A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0).CVE-2020-25239 · Other software · Siemens · reported by productcert@siemens.comHigh 8.8
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). The webserver could allow unauthorized actions via special urls for unpriviledged users. The settings of the UMC authorization server could be changed to add a rogue server by an attacker authenticating with unprivilege user rights.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Sep 13, 2019A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1).CVE-2019-13922 · Other software · Siemens AG · reported by productcert@siemens.comLow 2.7
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). An attacker with administrative privileges can obtain the hash of a connected device's password. The security vulnerability could be exploited by an attacker with network access to the SINEMA Remote Connect Server and administrative privileges. At the time of advisory publication no public exploitation of this security vulnerability was known.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Sep 13, 2019A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1).CVE-2019-13920 · Other software · Siemens AG · reported by productcert@siemens.comMedium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some parts of the web application are not protected against Cross Site Request Forgery (CSRF) attacks. The security vulnerability could be exploited by an attacker that is able to trigger requests of a logged-in user to the application. The vulnerability could allow switching the connectivity state of a user or a device. At the time of advisory publication no public exploitation of this security vulnerability was known.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Sep 13, 2019A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1).CVE-2019-13919 · Other software · Siemens AG · reported by productcert@siemens.comMedium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some pages that should only be accessible by a privileged user can also be accessed by a non-privileged user. The security vulnerability could be exploited by an attacker with network access and valid credentials for the web interface. No user interaction is required. The vulnerability could allow an attacker to access information that he should not be able to read. The affected information does not include passwords. At the time of advisory publication no public exploitation of this security vulnerability was known.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Sep 13, 2019A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1).CVE-2019-13918 · Other software · Siemens AG · reported by productcert@siemens.comCritical 9.8
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). The web interface has no means to prevent password guessing attacks. The vulnerability could be exploited by an attacker with network access to the vulnerable software, requiring no privileges and no user interaction. The vulnerability could allow full access to the web interface. At the time of advisory publication no public exploitation of this security vulnerability was known.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Apr 17, 2019A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0).CVE-2019-6570 · Other software · Siemens · reported by productcert@siemens.comHigh 8.8
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.
Product
SINEMA Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cert-portal.siemens.com cert-portal.siemens.com
Jul 22, 2016Cross-site scripting (XSS) vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitCVE-2016-6204 · Other software · Siemens · reported by MITREMedium 6.1
Cross-site scripting (XSS) vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Product
Sinema Remote Connect Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record securityfocus.com siemens.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.