{"id":"CVE-2020-25240","aliases":["EUVD-2020-17930","GHSA-frf8-ghgx-64v9"],"status":"published","title":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0)....","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0). Unpriviledged users can access services when guessing the url. An attacker could impact availability, integrity and gain information from logs and templates of the service.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00895,"percentile":0.59813,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-863"],"published":"2021-03-15T17:03:30Z","modified":"2026-06-17T03:06:38Z","products":[{"vendor":"siemens","product":"sinema remote connect server"},{"vendor":"siemens","product":"sinema_remote_connect_server"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-731317.pdf","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25240"},{"url":"https://github.com/advisories/GHSA-frf8-ghgx-64v9"}],"sources":{"cve":[{"id":"CVE-2020-25240","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0). Unpriviledged users can access services when guessing the url. An attacker could impact availability, integrity and gain information from logs and templates of the service.","status":"published","published":"2021-03-15T17:03:30Z","modified":"2024-08-04T15:33:05.573Z","cwes":["CWE-863"],"updated_at":"2026-11-02T14:35:48.52216Z"}],"euvd":[{"id":"EUVD-2020-17930","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0). Unpriviledged users can access services when guessing the url. An attacker could impact availability, integrity and gain information from logs and templates of the service.","status":"published","published":"2021-03-15T17:03:30Z","modified":"2024-08-04T15:33:05Z","updated_at":"2026-11-03T03:07:18.192905Z"}],"ghsa":[{"id":"GHSA-frf8-ghgx-64v9","title":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0)....","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0). Unpriviledged users can access services when guessing the url. An attacker could impact availability, integrity and gain information from logs and templates of the service.","status":"published","published":"2022-05-24T17:44:32Z","modified":"2023-01-29T05:06:04Z","cwes":["CWE-863"],"updated_at":"2026-11-02T14:45:56.147373Z"}],"nvd":[{"id":"CVE-2020-25240","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0). Unpriviledged users can access services when guessing the url. An attacker could impact availability, integrity and gain information from logs and templates of the service.","status":"published","published":"2021-03-15T17:15:20.033Z","modified":"2026-06-17T03:06:38.65Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:06:37.687844Z"}]}}