Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain actions in the web interface allowing an unauthenticated attacker to access and edit device configuration information of devices for which they have no privileges.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Vulnerability Type
直接请求(强制性浏览)
Vulnerability Title
Siemens SINEMA Remote Connect 安全漏洞
Vulnerability Description
Siemens SINEMA Remote Connect是德国西门子（Siemens）公司的一套远程管理平台。该平台支持以高效安全的方式远程访问分布在全球各地的机器设备以及确保对控制中心、服务工程师与已安装设备之间的VPN通道进行安全管理等。 Siemens SINEMA Remote Connect V3.2 SP1 版本之前存在安全漏洞，该漏洞源于受影响的设备在 Web 界面中执行某些操作时未正确验证身份验证，从而允许未经身份验证的攻击者访问和编辑他们没有权限的设备的设备配置信息。
CVSS Information
N/A
Vulnerability Type
N/A