Vulnerabilities > CVE-2024-39873 - Improper Restriction of Excessive Authentication Attempts vulnerability in Siemens Sinema Remote Connect Server

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
siemens
CWE-307
NVD
Published: 2024-07-09
Updated: 2024-09-09

Summary

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against user credentials in its web API. This could allow an attacker to learn user credentials that are vulnerable to brute force attacks.

Vulnerable Configurations

Part Description Count
Application
Siemens
12

Common Weakness Enumeration (CWE)

References