description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). The webserver could allow unauthorized actions via special urls for unpriviledged users. The settings of the UMC authorization server could be changed to add a rogue server by an attacker authenticating with unprivilege user rights.
problem types: CWE-863: Incorrect Authorization
affected:
{
product: SINEMA Remote Connect Server
vendor: Siemens
versions:
status: affected, version: All versions < V3.0
}