VYPR
← All advisories
Critical severity9.6NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026

CVE-2024-39872

CVE-2024-39872

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly assign rights to temporary files created during its update process. This could allow an authenticated attacker with the 'Manage firmware updates' role to escalate their privileges on the underlying OS level.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Siemens Foundation/Sinema Remote Connect Server5 versions
    cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*range: <3.2
    • cpe:2.3:a:siemens:sinema_remote_connect_server:3.2:-:*:*:*:*:*:*
    • cpe:2.3:a:siemens:sinema_remote_connect_server:3.2:hf1:*:*:*:*:*:*
    • (no CPE)range: <V3.2 SP1
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.