A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected system could manipulate certain parameters and set a valid user of the affected software as invalid (or vice-versa).
The product does not properly protect an assumed-immutable element from being modified by an attacker.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sinema_remote_connect_server | Siemens | * | 3.0 (excluding) |
| Sinema_remote_connect_server | Siemens | 3.0 (including) | 3.0 (including) |
| Sinema_remote_connect_server | Siemens | 3.0-sp1 (including) | 3.0-sp1 (including) |