A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software allows sending send-to-sleep notifications to the managed devices. An unauthenticated attacker in the same network of the affected system can abuse these notifications to cause a Denial-of-Service condition in the managed devices.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
27 Oct 2022, 12:59
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo |
23 Sep 2021, 19:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf - Patch, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 3.3
v3 : 6.5 |
| CPE | cpe:2.3:a:siemens:sinema_remote_connect_server:3.0:-:*:*:*:*:*:* cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:sinema_remote_connect_server:3.0:sp1:*:*:*:*:*:* |
14 Sep 2021, 11:42
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-09-14 11:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-37183
Mitre link : CVE-2021-37183
CVE.ORG link : CVE-2021-37183
JSON object : View
Products Affected
siemens
- sinema_remote_connect_server
CWE