A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The status provided by the syslog clients managed by the affected software can be manipulated by an unauthenticated attacker in the same network of the affected system.
Weakness
The product does not properly protect an assumed-immutable element from being modified by an attacker.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sinema_remote_connect_server | Siemens | * | 3.0 (excluding) |
| Sinema_remote_connect_server | Siemens | 3.0 (including) | 3.0 (including) |
| Sinema_remote_connect_server | Siemens | 3.0-sp1 (including) | 3.0-sp1 (including) |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/384.html
- https://cwe.mitre.org/data/definitions/385.html
- https://cwe.mitre.org/data/definitions/386.html
- https://cwe.mitre.org/data/definitions/387.html
- https://cwe.mitre.org/data/definitions/388.html