ICSA-21-257-19: Siemens SINEMA Remote Connect Server
CISA advisory · released 2021-09-14
Source record Collected from CISA's CSAF advisory feed
- Distribution label in the document: TLP:WHITE
- Revision 2, 2025-05-06 (final)
CISA's summary
Summary: Multiple vulnerabilities in SINEMA Remote Connect Server could allow an unauthorized remote attacker to retrieve or manipulate sensitive information from the affected software. In addition, the attacker could also cause a Denial-of-Service condition in devices controlled by the affected software. Siemens has released an update for the SINEMA Remote Connect Server and recommends to update to the latest version.
Products, as the advisory lists them
| Vendor | Product | Version |
|---|---|---|
| Siemens | SINEMA Remote Connect Server | <V3.0_SP2 |
DeSpy has not checked any unit, hardware revision or firmware.
Vulnerabilities in this advisory
- CVE-2021-37177 — CVE-2021-37177 · CWE-471
The status provided by the syslog clients managed by the affected software can be manipulated by an unauthenticated attacker in the same network of the affected system.
- CVE-2021-37183 — CVE-2021-37183 · CWE-284
The affected software allows sending send-to-sleep notifications to the managed devices. An unauthenticated attacker in the same network of the affected system can abuse these notifications to cause a Denial-of-Service condition in the managed devices.
- CVE-2021-37190 — CVE-2021-37190 · CWE-200
The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known user.
- CVE-2021-37191 — CVE-2021-37191 · CWE-799
An unauthenticated attacker in the same network of the affected system could brute force the usernames from the affected software.
- CVE-2021-37192 — CVE-2021-37192 · CWE-200
The affected software has an information disclosure vulnerability that could allow an attacker to retrieve a list of network devices a known user can manage.
- CVE-2021-37193 — CVE-2021-37193 · CWE-471
An unauthenticated attacker in the same network of the affected system could manipulate certain parameters and set a valid user of the affected software as invalid (or vice-versa).
Acknowledgments, as the advisory lists them
- Siemens ProductCERT: reporting this vulnerability to CISA.
- Cybersecurity and Infrastructure Security Agency (CISA): coordination efforts
- Sharon Brizinov, Claroty: coordinated disclosure
The advisory's legal notice
Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
Sources
DeSpy's copy of this version is dated 2026-09-28.
This product uses the NVD API but is not endorsed or certified by the NVD.
CVE records: Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.
CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.
CISA's Known Exploited Vulnerabilities catalog and CISA Vulnrichment data are CC0 1.0. CISA advisories are shown with the TLP label their document carries. No endorsement by CISA, DHS, NIST or MITRE is stated or implied.