Vulnerabilities > CVE-2020-25240 - Incorrect Authorization vulnerability in Siemens Sinema Remote Connect Server 1.1/2.0

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
siemens
CWE-863

Summary

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). Unpriviledged users can access services when guessing the url. An attacker could impact availability, integrity and gain information from logs and templates of the service.

Vulnerable Configurations

Part Description Count
Application
Siemens
2

Common Weakness Enumeration (CWE)