[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxEGPN0v4qfU-n8RIQry8NUTeQEh3CQzCtxem7r2SW2U":3,"g5a-ex:siemens\u002Fsinema_server@*":114,"g5a-family:siemens\u002Fsinema_server":120},{"success":4,"data":5},true,{"product":6,"versions":24,"topVulnerabilitiesByEpss":28,"kevVulnerabilities":87,"seoMetadata":92,"meta":111},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":23},"siemens","sinema_server",3,17,1,"2023-10-10",[14,18,20],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"12.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"13.0",{"version":21,"cve_count":22,"kev_count":11,"has_kev":4},"14.0",9,"Sinema Server by Siemens is a technology product with 3 tracked versions and 17 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[25,26,27],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":4},[29,36,42,49,54,60,67,72,76,81],{"cveId":30,"description":31,"publishedDate":32,"cvssScore":22,"cvssVersion":33,"severity":34,"isKev":4,"epssScore":35},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16","v3.1","Critical",0.99999,{"cveId":37,"description":38,"publishedDate":32,"cvssScore":39,"cvssVersion":33,"severity":40,"isKev":17,"epssScore":41},"CVE-2021-34798","Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.",7.5,"High",0.64509,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":33,"severity":47,"isKev":17,"epssScore":48},"CVE-2021-3449","An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).","2021-03-25",5.9,"Medium",0.63542,{"cveId":50,"description":51,"publishedDate":32,"cvssScore":52,"cvssVersion":33,"severity":34,"isKev":17,"epssScore":53},"CVE-2021-39275","ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party \u002F external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.",9.8,0.39402,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":33,"severity":40,"isKev":17,"epssScore":59},"CVE-2020-25237","A vulnerability has been identified in SINEC NMS (All versions \u003C V1.0 SP1 Update 1), SINEMA Server (All versions \u003C V14.0 SP2 Update 2). When uploading files to an affected system using a zip container, the system does not correctly check if the relative file path of the extracted files is still within the intended target directory. With this an attacker could create or overwrite arbitrary files on an affected system. This type of vulnerability is also known as 'Zip-Slip'. (ZDI-CAN-12054)","2021-02-09",8.1,0.20616,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":65,"severity":34,"isKev":17,"epssScore":66},"CVE-2014-2731","Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port (1) 4999 or (2) 80.","2014-04-19",9.3,"v2",0.04243,{"cveId":68,"description":69,"publishedDate":63,"cvssScore":70,"cvssVersion":65,"severity":47,"isKev":17,"epssScore":71},"CVE-2014-2732","Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic to port (1) 4999 or (2) 80.",5,0.03606,{"cveId":73,"description":74,"publishedDate":63,"cvssScore":70,"cvssVersion":65,"severity":47,"isKev":17,"epssScore":75},"CVE-2014-2733","Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service (web-interface outage) via crafted HTTP requests to port (1) 4999 or (2) 80.",0.02634,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":39,"cvssVersion":33,"severity":40,"isKev":17,"epssScore":80},"CVE-2019-6575","A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions \u003C V2.7), SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl. SIPLUS variants) (All versions \u003C V15.1 Upd 4), SIMATIC HMI Comfort Panels 4\" - 22\" (incl. SIPLUS variants) (All versions \u003C V15.1 Upd 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions \u003C V15.1 Upd 4), SIMATIC IPC DiagMonitor (All versions \u003C V5.1.3), SIMATIC NET PC Software V13 (All versions), SIMATIC NET PC Software V14 (All versions \u003C V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC RF188C (All versions \u003C V1.1.0), SIMATIC RF600R family (All versions \u003C V3.2.1), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 \u003C V2.6.1), SIMATIC S7-1500 Software Controller (All versions between V2.5 (including) and V2.7 (excluding)), SIMATIC WinCC OA (All versions \u003C V3.15 P018), SIMATIC WinCC Runtime Advanced (All versions \u003C V15.1 Upd 4), SINEC NMS (All versions \u003C V1.0 SP1), SINEMA Server (All versions \u003C V14 SP2), SINUMERIK OPC UA Server (All versions \u003C V2.1), TeleControl Server Basic (All versions \u003C V3.1.1). Specially crafted network packets sent to affected devices on port 4840\u002Ftcp could allow an unauthenticated remote attacker to cause a denial of service condition of the OPC communication or crash the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the OPC communication.","2019-04-17",0.01646,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":33,"severity":34,"isKev":17,"epssScore":86},"CVE-2019-10940","A vulnerability has been identified in SINEMA Server (All versions \u003C V14.0 SP2 Update 1). Incorrect session validation could allow an attacker with a valid session, with low privileges, to perform firmware updates and other administrative operations on connected devices. The security vulnerability could be exploited by an attacker with network access to the affected system. An attacker must have access to a low privileged account in order to exploit the vulnerability. An attacker could use the vulnerability to compromise confidentiality, integrity, and availability of the affected system and underlying components. At the time of advisory publication no public exploitation of this security vulnerability was known.","2020-01-16",9.9,0.01208,[88],{"cveId":30,"description":31,"publishedDate":32,"cvssScore":22,"severity":34,"isKev":4,"epssScore":35,"cisaVulnName":89,"cisaDateAdded":90,"cisaShortDescription":31,"cisaRequiredAction":91},"Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01","Apply updates per vendor instructions.",{"title":93,"metaDescription":94,"keywords":95,"structuredData":96},"Sinema Server by Siemens - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Sinema Server by Siemens covering 3 versions with 17 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Sinema Server vulnerabilities, Sinema Server security, Sinema Server CVE, Siemens Sinema Server, Sinema Server threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Sinema Server KEV, Sinema Server exploited vulnerabilities",{"@context":97,"@type":98,"name":99,"description":94,"url":100,"manufacturer":101,"applicationCategory":105,"softwareVersion":106,"mainEntity":107},"https:\u002F\u002Fschema.org","SoftwareApplication","Sinema Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Fsinema_server",{"@type":102,"name":103,"url":104},"Organization","Siemens","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsiemens","Security Software","3 versions tracked",{"@type":108,"name":109,"description":110,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Sinema Server Security Vulnerabilities","Security vulnerabilities affecting Sinema Server by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":112,"apiVersion":113},"2026-10-17T19:58:57.363Z","3.0",{"rows":115,"total":11,"capped":17,"failed":16},[116],{"cveId":30,"name":89,"severity":34,"cvss":22,"added":90,"epss":35,"published":117,"ranges":118,"checked":4,"hits":119,"covers":17},"2021-09-16T15:15:07.633",[21],[],[]]