1. Home
  2. CVE Database
  3. CVE-2024-39871
MEDIUM · 6.3

CVE-2024-39871

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly separate the rights to edit device settings and to edit settings fo...

Vulnerability Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly separate the rights to edit device settings and to edit settings for communication relations. This could allow an authenticated attacker with the permission to manage devices to gain access to participant groups that the attacked does not belong to.

CVSS Score

6.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
SiemensSinema Remote Connect Server< 3.2

Related Weaknesses (CWE)

CWE-863

References

FAQ

What is CVE-2024-39871?

CVE-2024-39871 is a vulnerability with a CVSS score of 6.3 (MEDIUM). A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly separate the rights to edit device settings and to edit settings fo...

How severe is CVE-2024-39871?

CVE-2024-39871 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-39871?

Check the references section above for vendor advisories and patch information. Affected products include: Siemens Sinema Remote Connect Server.