VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026

CVE-2024-39871

CVE-2024-39871

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly separate the rights to edit device settings and to edit settings for communication relations. This could allow an authenticated attacker with the permission to manage devices to gain access to participant groups that the attacked does not belong to.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Siemens Foundation/Sinema Remote Connect Server5 versions
    cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*range: <3.2
    • cpe:2.3:a:siemens:sinema_remote_connect_server:3.2:-:*:*:*:*:*:*
    • cpe:2.3:a:siemens:sinema_remote_connect_server:3.2:hf1:*:*:*:*:*:*
    • (no CPE)range: <V3.2 SP1
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.