Siemens SINEMA Remote Connect Server Access Control Error Vulnerability (CNVD-2024-13805)

Siemens SINEMA Remote Connect Server is a remote network management platform from Siemens, Germany. The platform is used to remotely access, maintain, control and diagnose the underlying network. An Access Control Error vulnerability exists in Siemens SINEMA Remote Connect Server versions prior to V3.2. The vulnerability, which stems from a lack of proper access control to certain endpoints, can be exploited by an attacker to cause unauthorized access to resources and potentially lead to code execution.