{"id":"CVE-2021-37190","aliases":["EUVD-2021-23764","GHSA-f8xr-vx48-q3fh"],"status":"published","title":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2)....","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known user.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00365,"percentile":0.30731,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2021-09-14T10:47:50Z","modified":"2026-06-17T04:00:13Z","products":[{"vendor":"siemens","product":"sinema remote connect server"},{"vendor":"siemens","product":"sinema_remote_connect_server"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37190"},{"url":"https://github.com/advisories/GHSA-f8xr-vx48-q3fh"}],"sources":{"cve":[{"id":"CVE-2021-37190","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known user.","status":"published","published":"2021-09-14T10:47:50Z","modified":"2025-04-23T19:28:10.985Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:32:58.359368Z"}],"euvd":[{"id":"EUVD-2021-23764","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known user.","status":"published","published":"2021-09-14T10:47:50Z","modified":"2025-04-23T19:28:10Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:05.855584Z"}],"ghsa":[{"id":"GHSA-f8xr-vx48-q3fh","title":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2)....","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known user.","status":"published","published":"2022-05-24T19:14:30Z","modified":"2025-04-23T21:30:30Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:02:00.72042Z"}],"nvd":[{"id":"CVE-2021-37190","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known user.","status":"published","published":"2021-09-14T11:15:25.94Z","modified":"2026-06-17T04:00:13.653Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":3.3,"vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:06:58.502206Z"}]}}