CVE-2021-31338

2021-08-1910:00:11

CWE-15

siemens

www.cve.org

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.0 SP1). Affected devices allow to modify configuration settings over an unauthenticated channel. This could allow a local attacker to escalate privileges and execute own code on the device.

CNA Affected

[
  {
    "product": "SINEMA Remote Connect Client",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0 SP1"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-816035.pdf