CVE-2021-37191

Medium

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected system could brute force the usernames from the affected software.

SeverityMedium
CVSS4.3
Exploit probability—
ProductSiemens Sinema Remote Connect Server
PublishedSep 14, 2021
First seenSep 14, 2021
Weakness typeCWE-799CWE-799

How to fix

Update
  • siemens sinema_remote_connect_server3.0 or later

Affected products

ProductAffected versionsFixed in
siemens sinema_remote_connect_serverv < 3.0, 3.03.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.