[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffn03TPCIlSO3FJJOl5XuG89cRtS2kVoR3z4KQbcLHLY":3,"g5a-family:siemens\u002Fsinema_remote_connect_server":131,"g5a-ex:siemens\u002Fsinema_remote_connect_server@*":134},{"success":4,"data":5},true,{"product":6,"versions":36,"topVulnerabilitiesByEpss":45,"kevVulnerabilities":105,"seoMetadata":110,"meta":129},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":35},"siemens","sinema_remote_connect_server",8,70,1,"2024-09-10",[14,18,20,22,24,27,30,32],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"1.1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"1.2",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"1.3",{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},"2.0",4,{"version":28,"cve_count":29,"kev_count":16,"has_kev":17},"3.0",9,{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"3.1",{"version":33,"cve_count":34,"kev_count":11,"has_kev":4},"3.2",16,"Sinema Remote Connect Server by Siemens is a technology product with 8 tracked versions and 70 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[37,38,39,40,41,42,43,44],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},{"version":28,"cve_count":29,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":34,"kev_count":11,"has_kev":4},[46,53,59,65,71,76,83,88,95,100],{"cveId":47,"description":48,"publishedDate":49,"cvssScore":29,"cvssVersion":50,"severity":51,"isKev":4,"epssScore":52},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16","v3.1","Critical",0.99999,{"cveId":54,"description":55,"publishedDate":49,"cvssScore":56,"cvssVersion":50,"severity":57,"isKev":17,"epssScore":58},"CVE-2021-34798","Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.",7.5,"High",0.64509,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":50,"severity":51,"isKev":17,"epssScore":64},"CVE-2022-25236","xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.","2022-02-16",9.8,0.35271,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":50,"severity":51,"isKev":17,"epssScore":70},"CVE-2021-20093","A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions \u003C 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server.","2021-06-16",9.1,0.33304,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":56,"cvssVersion":50,"severity":57,"isKev":17,"epssScore":75},"CVE-2018-5391","The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.","2018-09-06",0.32445,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":50,"severity":81,"isKev":17,"epssScore":82},"CVE-2022-29034","A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003C V3.1). An error message pop up window in the web interface of the affected application does not prevent injection of JavaScript code.\r\n\r\nThis could allow attackers to perform reflected cross-site scripting (XSS) attacks.","2022-06-14",6.1,"Medium",0.28732,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":56,"cvssVersion":50,"severity":57,"isKev":17,"epssScore":87},"CVE-2020-7595","xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.","2020-01-21",0.07836,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"cvssVersion":50,"severity":93,"isKev":17,"epssScore":94},"CVE-2021-22924","libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*,which could lead to libcurl reusing wrong connections.File paths are, or can be, case sensitive on many systems but not all, and caneven vary depending on used file systems.The comparison also didn't include the 'issuer cert' which a transfer can setto qualify how to verify the server certificate.","2021-08-05",3.7,"Low",0.0627,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":56,"cvssVersion":50,"severity":57,"isKev":17,"epssScore":99},"CVE-2019-19956","xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.","2019-12-24",0.05626,{"cveId":101,"description":102,"publishedDate":91,"cvssScore":103,"cvssVersion":50,"severity":81,"isKev":17,"epssScore":104},"CVE-2021-22925","curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending `NEW_ENV` variables, libcurlcould be made to pass on uninitialized data from a stack based buffer to theserver. Therefore potentially revealing sensitive internal information to theserver using a clear-text network protocol.This could happen because curl did not call and use sscanf() correctly whenparsing the string provided by the application.",5.3,0.05367,[106],{"cveId":47,"description":48,"publishedDate":49,"cvssScore":29,"severity":51,"isKev":4,"epssScore":52,"cisaVulnName":107,"cisaDateAdded":108,"cisaShortDescription":48,"cisaRequiredAction":109},"Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01","Apply updates per vendor instructions.",{"title":111,"metaDescription":112,"keywords":113,"structuredData":114},"Sinema Remote Connect Server by Siemens - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Sinema Remote Connect Server by Siemens covering 8 versions with 70 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Sinema Remote Connect Server vulnerabilities, Sinema Remote Connect Server security, Sinema Remote Connect Server CVE, Siemens Sinema Remote Connect Server, Sinema Remote Connect Server threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Sinema Remote Connect Server KEV, Sinema Remote Connect Server exploited vulnerabilities",{"@context":115,"@type":116,"name":117,"description":112,"url":118,"manufacturer":119,"applicationCategory":123,"softwareVersion":124,"mainEntity":125},"https:\u002F\u002Fschema.org","SoftwareApplication","Sinema Remote Connect Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Fsinema_remote_connect_server",{"@type":120,"name":121,"url":122},"Organization","Siemens","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsiemens","Security Software","8 versions tracked",{"@type":126,"name":127,"description":128,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Sinema Remote Connect Server Security Vulnerabilities","Security vulnerabilities affecting Sinema Remote Connect Server by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":130,"apiVersion":28},"2026-10-17T15:17:19.040Z",[132],{"product":133,"cves":11},"sinema_remote_connect_server_firmware",{"rows":135,"total":11,"capped":17,"failed":16},[136],{"cveId":47,"name":107,"severity":51,"cvss":29,"added":108,"epss":52,"published":137,"ranges":138,"checked":4,"hits":140,"covers":17},"2021-09-16T15:15:07.633",[139,33],"before 3.1",[]]