Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1

An attacker with valid credentials could exploit multiple vulnerabilities in SINEMA Remote Connect Server to remotely execute code or gain unauthorized access to remote engineering workstations and industrial control devices connected through the VPN tunnel, potentially allowing them to alter device configurations or disrupt remote operations.

Organizations using Siemens SINEMA Remote Connect Server for secure remote access to industrial control systems, engineering workstations, and critical infrastructure. This includes water utilities, power generation and distribution facilities, manufacturing plants, and any organization managing remote access to PLCs, RTUs, HMIs, or engineering networks via this VPN gateway.

An attacker with valid login credentials accesses SINEMA Remote Connect Server over the network. They exploit one or more of the authentication, file upload, or privilege escalation vulnerabilities to gain elevated access on the server. From there, they could establish a VPN tunnel to reach protected industrial devices or engineering workstations behind the server, or execute commands on the server itself to modify configurations or intercept credentials.