CVE-2020-25240

8.8 highEPSS 0.9%

High (8.8) in siemens sinema remote connect server. EPSS 0.9% chance of exploitation in the next 30 days.

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). Unpriviledged users can access services when guessing the url. An attacker could impact availability, integrity and gain information from logs and templates of the service.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2021-03-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:sinema_remote_connect_server

References

https://cert-portal.siemens.com/productcert/pdf/ssa-731317.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-731317.pdf

Check your stack JSON