CVE-2020-25240

State: Published
Severity: Not scored
Published: Mar 15, 2021
Updated: Aug 4, 2024
Reserved: Sep 10, 2020

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). Unpriviledged users can access services when guessing the url. An attacker could impact availability, integrity and gain information from logs and templates of the service.

Scores

The record has no CVSS score.

Weaknesses

CWE-863 Incorrect Authorization

Affected Products

Product	Versions
SINEMA Remote Connect ServerSiemens	All versions < V3.0Affected

References

https://cert-portal.siemens.com/productcert/pdf/ssa-731317.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.