A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). Unpriviledged users can access services when guessing the url. An attacker could impact availability, integrity and gain information from logs and templates of the service.
References
Link | Resource |
---|---|
https://cert-portal.siemens.com/productcert/pdf/ssa-731317.pdf | Vendor Advisory |
Configurations
Information
Published : 2021-03-15 10:15
Updated : 2021-03-18 13:39
NVD link : CVE-2020-25240
Mitre link : CVE-2020-25240
JSON object : View
CWE
CWE-863
Incorrect Authorization
Products Affected
siemens
- sinema_remote_connect_server