{"id":"CVE-2021-37177","aliases":["EUVD-2021-23751","GHSA-3xq3-mvf9-543x"],"status":"published","title":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2)....","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). The status provided by the syslog clients managed by the affected software can be manipulated by an unauthenticated attacker in the same network of the affected system.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00387,"percentile":0.33222,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-471"],"published":"2021-09-14T10:47:45Z","modified":"2026-06-17T04:00:11Z","products":[{"vendor":"siemens","product":"sinema remote connect server"},{"vendor":"siemens","product":"sinema_remote_connect_server"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37177"},{"url":"https://github.com/advisories/GHSA-3xq3-mvf9-543x"}],"sources":{"cve":[{"id":"CVE-2021-37177","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). The status provided by the syslog clients managed by the affected software can be manipulated by an unauthenticated attacker in the same network of the affected system.","status":"published","published":"2021-09-14T10:47:45Z","modified":"2025-04-23T19:28:31.544Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-471"],"updated_at":"2026-11-02T14:32:58.028461Z"}],"euvd":[{"id":"EUVD-2021-23751","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). The status provided by the syslog clients managed by the affected software can be manipulated by an unauthenticated attacker in the same network of the affected system.","status":"published","published":"2021-09-14T10:47:45Z","modified":"2025-04-23T19:28:31Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:05.855584Z"}],"ghsa":[{"id":"GHSA-3xq3-mvf9-543x","title":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2)....","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). The status provided by the syslog clients managed by the affected software can be manipulated by an unauthenticated attacker in the same network of the affected system.","status":"published","published":"2022-05-24T19:14:31Z","modified":"2025-04-23T21:30:30Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-471"],"updated_at":"2026-11-02T15:02:00.72042Z"}],"nvd":[{"id":"CVE-2021-37177","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). The status provided by the syslog clients managed by the affected software can be manipulated by an unauthenticated attacker in the same network of the affected system.","status":"published","published":"2021-09-14T11:15:25.54Z","modified":"2026-06-17T04:00:11.763Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":3.3,"vector":"AV:A/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-471"],"updated_at":"2026-11-02T14:06:58.502206Z"}]}}