cvedb.io
CVE-2024-39868
HIGH · CVSS 7.6
EPSS exploitation probability: 0%
Published 2024-07-09T12:15:18.157 · Last modified 2026-06-17T07:42:56.007

Summary

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain actions in the web interface allowing an unauthenticated attacker to access and edit VxLAN configuration information of networks for which they have no privileges.

Affected products

siemens — sinema_remote_connect_server

Does this affect you?

Add your gear to cvedb and we'll alert you only when siemens ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.