VYPR
← All advisories
High severity8.8NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026

CVE-2024-39866

CVE-2024-39866

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with administrative privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Siemens Foundation/Sinema Remote Connect Server5 versions
    cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*range: <3.2
    • cpe:2.3:a:siemens:sinema_remote_connect_server:3.2:-:*:*:*:*:*:*
    • cpe:2.3:a:siemens:sinema_remote_connect_server:3.2:hf1:*:*:*:*:*:*
    • (no CPE)range: <V3.2 SP1
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.