Multiple Vulnerabilities in SINEMA Remote Connect Client before V3.2 HF1

An attacker with local access to a system running SINEMA Remote Connect Client could execute commands or modify files with the privileges of the logged-in user, potentially gaining unauthorized access to remote industrial systems or disrupting remote connectivity to critical infrastructure.

This affects engineering and operations teams at utilities and industrial facilities that use SINEMA Remote Connect Client for remote access to industrial control systems, SCADA platforms, and other critical infrastructure. Anyone managing remote connections to substations, water treatment plants, or manufacturing facilities should verify their client version.

An attacker with local access to an engineering workstation could exploit a command injection vulnerability in SINEMA Remote Connect Client to execute arbitrary commands. This could allow them to modify connection configurations, intercept credentials used for remote access to industrial systems, or pivot to connected devices.