cvedb.io
CVE-2024-39866
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2024-07-09T12:15:17.683 · Last modified 2026-06-17T07:42:55.757

Summary

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with administrative privileges.

Affected products

siemens — sinema_remote_connect_server

Does this affect you?

Add your gear to cvedb and we'll alert you only when siemens ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.