description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The application does not perform the integrity check of the update packages. Without validation, an admin user might be tricked to install a malicious package, granting root privileges to an attacker.
problem types: CWE-345: Insufficient Verification of Data Authenticity
affected:
{
product: SINEMA Remote Connect Server
vendor: Siemens
versions:
status: affected, version: All versions < V3.1
}