Severity
Medium
Analysis Summary
CVE-2024-42344
Siemens SINEMA Remote Connect Client could allow a local authenticated attacker to obtain sensitive information, caused by the insertion of sensitive information into a log file. By gaining access to the log files, an attacker could exploit this vulnerability to obtain other users' configuration data, and use this information to launch further attacks against the affected system.
Impact
- Information Disclosure
Indicators of Compromise
CVE
- CVE-2024-42344
Affected Vendors
Siemens
Affected Products
- Siemens SINEMA Remote Connect Client - 3.2
Remediation
Refer to Siemens Security Advisory for patch, upgrade or suggested workaround information.