{"id":"CVE-2021-37193","aliases":["EUVD-2021-23767","GHSA-6853-5v4j-v7vg"],"status":"published","title":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). An...","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). An unauthenticated attacker in the same network of the affected system could manipulate certain parameters and set a valid user of the affected software as invalid (or vice-versa).","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00363,"percentile":0.30517,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-471"],"published":"2021-09-14T10:47:52Z","modified":"2026-06-17T04:00:14Z","products":[{"vendor":"siemens","product":"sinema remote connect server"},{"vendor":"siemens","product":"sinema_remote_connect_server"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37193"},{"url":"https://github.com/advisories/GHSA-6853-5v4j-v7vg"}],"sources":{"cve":[{"id":"CVE-2021-37193","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). An unauthenticated attacker in the same network of the affected system could manipulate certain parameters and set a valid user of the affected software as invalid (or vice-versa).","status":"published","published":"2021-09-14T10:47:52Z","modified":"2025-04-23T19:27:52.584Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-471"],"updated_at":"2026-11-02T14:32:58.359368Z"}],"euvd":[{"id":"EUVD-2021-23767","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). An unauthenticated attacker in the same network of the affected system could manipulate certain parameters and set a valid user of the affected software as invalid (or vice-versa).","status":"published","published":"2021-09-14T10:47:52Z","modified":"2025-04-23T19:27:52Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:06.372143Z"}],"ghsa":[{"id":"GHSA-6853-5v4j-v7vg","title":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). An...","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). An unauthenticated attacker in the same network of the affected system could manipulate certain parameters and set a valid user of the affected software as invalid (or vice-versa).","status":"published","published":"2022-05-24T19:14:30Z","modified":"2025-04-23T21:31:32Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-471"],"updated_at":"2026-11-02T15:02:00.72042Z"}],"nvd":[{"id":"CVE-2021-37193","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.0 SP2). An unauthenticated attacker in the same network of the affected system could manipulate certain parameters and set a valid user of the affected software as invalid (or vice-versa).","status":"published","published":"2021-09-14T11:15:26.17Z","modified":"2026-06-17T04:00:14.277Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":3.3,"vector":"AV:A/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-471"],"updated_at":"2026-11-02T14:06:58.502206Z"}]}}