CVE-2024-42344 — Siemens / SINEMA Remote Connect Client

CVE-2024-42344

Siemens / SINEMA Remote Connect Client PUBLISHED

Description (CNA)

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive information into a log file which is readable by all legitimate users of the underlying system. This could allow an authenticated attacker to compromise the confidentiality of other users' configuration data.

Affected (CNA)

Vendor / product	Versions
Siemens / SINEMA Remote Connect Client	affected 0 before V3.2 SP2

CWE

CWE-532

References

https://cert-portal.siemens.com/productcert/html/ssa-417159.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.