Lucene search
HistorySep 10, 2024 - 10:15 a.m.
CVE-2024-32006
vulnerability
sinema remote connect client
user session
multi-factor authentication
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS
0
Percentile
9.6%
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application does not expire the user session on reboot without logout. This could allow an attacker to bypass Multi-Factor Authentication.
Related
cvelist
cvelist
CVE-2024-32006
2024-09-10 09:36:29
vulnrichment
vulnrichment
CVE-2024-32006
2024-09-10 09:36:29
cve
cve
CVE-2024-32006
2024-09-10 10:15:09
ics
ics
Siemens SINEMA
2024-09-12 12:00:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS
0
Percentile
9.6%
Related for NVD:CVE-2024-32006