CVE Vulnerabilities

CVE-2021-37177

Modification of Assumed-Immutable Data (MAID)

Published: Sep 14, 2021 | Modified: Sep 23, 2021
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
3.3 LOW
AV:A/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The status provided by the syslog clients managed by the affected software can be manipulated by an unauthenticated attacker in the same network of the affected system.

Weakness

The product does not properly protect an assumed-immutable element from being modified by an attacker.

Affected Software

Name Vendor Start Version End Version
Sinema_remote_connect_server Siemens * 3.0 (excluding)
Sinema_remote_connect_server Siemens 3.0 (including) 3.0 (including)
Sinema_remote_connect_server Siemens 3.0-sp1 (including) 3.0-sp1 (including)

Potential Mitigations

References