CVE-2024-42344

MEDIUM

SINEMA Remote Connect Client < 3.2 SP2 - Sensitive Information Disclosure in Log File

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive information into a log file which is readable by all legitimate users of the underlying system. This could allow an authenticated attacker to compromise the confidentiality of other users' configuration data.

References (1)

Core 1

Scores

CVSS v3 4.4
EPSS 0.0015
EPSS Percentile 5.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-532
Status published
Products (2)
siemens/sinema_remote_connect_client 3.2 (3 CPE variants)
siemens/sinema_remote_connect_client < 3.2
Published Sep 10, 2024
Tracked Since Feb 18, 2026