5.5
CVE-2024-42344
- EPSS 0.16%
- Veröffentlicht 10.09.2024 10:15:12
- Zuletzt bearbeitet 10.09.2024 18:54:58
- Erkennungen
LoginA vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive information into a log file which is readable by all legitimate users of the underlying system. This could allow an authenticated attacker to compromise the confidentiality of other users' configuration data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Sinema Remote Connect Client Version < 3.2
Siemens ≫ Sinema Remote Connect Client Version 3.2 Update -
Siemens ≫ Sinema Remote Connect Client Version 3.2 Update hf1
Siemens ≫ Sinema Remote Connect Client Version 3.2 Update sp1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.049 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| Siemens | 4.8 | 0 | 0 |
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| Siemens | 4.4 | 1.8 | 2.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
|
CWE-532 Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
https://cert-portal.siemens.com/productcert/html/ssa-417159.html