Severity
High
Analysis Summary
CVE-2021-31338
Siemens SINEMA Remote Connect Client could allow a locally authenticated attacker to gain elevated privileges on the system, caused by allowing modify configuration settings over an unauthenticated channel. An attacker could exploit this vulnerability to escalate privileges and execute arbitrary code on the device.
Impact
- Unauthorized Access
Affected Vendors
Siemens
Affected Products
- Siemens Sinema Remote Connect Client 3.0
Remediation
Refer to Siemens Security Advisory for the patch, upgrade, or suggested workaround information