Siemens Sinema Remote Connect Client vulnerabilities

10 CVEs affecting Siemens Sinema Remote Connect Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-30033, published 2025-08-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-3822, published 2019-02-06. Critical severity, CVSS 9.8. EPSS: 12.9% chance of exploitation in the next 30 days. libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header…
CVE-2018-16890, published 2019-02-06. High severity, CVSS 7.5. EPSS: 5.4% chance of exploitation in the next 30 days. libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages (`lib/vauth/ntlm.c:ntlm_decode_type2_target`) does…
CVE-2024-33698, published 2024-09-10. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1…
CVE-2024-39569, published 2024-07-09. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server…
CVE-2024-39568, published 2024-07-09. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server…
CVE-2024-39567, published 2024-07-09. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server…
CVE-2024-22045, published 2024-03-12. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.1 SP1). The product places sensitive information into files or directories that are accessible to actors who are…
CVE-2024-32006, published 2024-09-10. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application does not expire the user session on reboot without logout. This could allow an…
CVE-2025-30033, published 2025-08-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup…
CVE-2024-42344, published 2024-09-10. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive information into a log file which is readable by all…