CVE-2021-37193

State
Published
Severity
4.3 Medium
Published
Sep 14, 2021
Updated
Apr 23, 2025
Reserved
Jul 21, 2021

Read the record on cve.org

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected system could manipulate certain parameters and set a valid user of the affected software as invalid (or vice-versa).

Scores

CVSSScoreVectorSource
3.14.3 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NCISA-ADP

Weaknesses

  • CWE-471 Modification of Assumed-Immutable Data (MAID)

Affected Products

ProductVersions
SINEMA Remote Connect ServerSiemens
  • All versions < V3.0 SP2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.