Siemens Sinema Server vulnerabilities

17 CVEs affecting Siemens Sinema Server, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-35796, published 2023-10-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-40438: Apache HTTP Server-Side Request Forgery (SSRF), published 2021-09-16. Critical severity, CVSS 9.0. Actively exploited: in CISA KEV since 2021-12-01. EPSS: 100% chance of exploitation in the next 30 days. A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVE-2021-34798, published 2021-09-16. High severity, CVSS 7.5. EPSS: 64.5% chance of exploitation in the next 30 days. Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVE-2021-3449, published 2021-03-25. Medium severity, CVSS 5.9. EPSS: 63.5% chance of exploitation in the next 30 days. An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where…
CVE-2021-39275, published 2021-09-16. Critical severity, CVSS 9.8. EPSS: 39.4% chance of exploitation in the next 30 days. ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue…
CVE-2020-25237, published 2021-02-09. High severity, CVSS 8.1. EPSS: 20.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2). When uploading files to an affected system using a zip…
CVE-2014-2731, published 2014-04-19. High severity, CVSS 9.3. EPSS: 4.2% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port (1) 4999 or (2) 80.
CVE-2014-2732, published 2014-04-19. Medium severity, CVSS 5.0. EPSS: 3.6% chance of exploitation in the next 30 days. Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic to port (1) 4999 or…
CVE-2014-2733, published 2014-04-19. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service (web-interface outage) via crafted HTTP requests to port (1) 4999 or (2) 80.
CVE-2019-6575, published 2019-04-17. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.7), SIMATIC HMI Comfort…
CVE-2019-10940, published 2020-01-16. Critical severity, CVSS 9.9. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1). Incorrect session validation could allow an attacker with a valid session, with low privileges, to perform…

Latest

CVE-2023-35796, published 2023-10-10. Critical severity, CVSS 9.0. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEMA Server V14 (All versions). The affected application improperly sanitizes certain SNMP configuration data retrieved from monitored devices. An attacker…
CVE-2022-25311, published 2022-03-08. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). The affected software do not properly check…
CVE-2019-10941, published 2021-09-14. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEMA Server (All versions < V14 SP3). Missing authentication for functionality that requires administrative user identity could allow an attacker to obtain…
CVE-2020-7580, published 2020-06-10. Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions),…