CVE-2024-39569

Severity: high (CVSS 7.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-09 · updated 2026-06-17
Weakness: CWE-77

Description

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an administrative remote attacker running a corresponding SINEMA Remote Connect Server to execute arbitrary code with system privileges on the client system.

Affected products

Siemens SINEMA Remote Connect Client: before 3.2; 3.2 — fixed in 3.2

How to fix

Upgrade to a fixed version: Siemens SINEMA Remote Connect Client 3.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-39569 or the next vulnerability affects your stack