Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability has been identified in SINEMA Server (All versions < V14 SP3). Missing authentication for functionality that requires administrative user identity could allow an attacker to obtain encoded system configuration backup files. This is only possible through network access to the affected system, and successful exploitation requires no system privileges.
CVSS Information
N/A
Vulnerability Type
关键功能的认证机制缺失
Vulnerability Title
SINEMA Server 访问控制错误漏洞
Vulnerability Description
Siemens SINEMA Server是德国西门子（Siemens）公司的一款专门为工业应用开发的软件。它使您能够完全可视化和监视网络。 Siemens SINEMA Server 存在访问控制错误漏洞，该漏洞源于 SINEMA Server 中发现了一个漏洞。 缺少需要管理用户身份的功能的身份验证可能允许攻击者获取编码的系统配置备份文件。 这只能通过对受影响系统的网络访问来实现，并且成功利用不需要系统权限。
CVSS Information
N/A
Vulnerability Type
N/A