# Siemens Sinema Remote Connect Server


- [CVE-2021-40438](https://insights.sbomify.com/CVE-2021-40438/): Apache HTTP Server-Side Request Forgery (SSRF) (critical 9.0, exploited in the wild)
- [CVE-2022-32257](https://insights.sbomify.com/CVE-2022-32257/): Missing authorization in SINEMA Remote Connect Server (critical 9.8)
- [CVE-2022-25315](https://insights.sbomify.com/CVE-2022-25315/): Integer overflow in n/a (critical 9.8)
- [CVE-2022-25235](https://insights.sbomify.com/CVE-2022-25235/): Other in n/a (critical 9.8)
- [CVE-2022-25236](https://insights.sbomify.com/CVE-2022-25236/): Other in n/a (critical 9.8)
- [CVE-2022-23852](https://insights.sbomify.com/CVE-2022-23852/): Integer overflow in n/a (critical 9.8)
- [CVE-2022-22822](https://insights.sbomify.com/CVE-2022-22822/): Integer overflow in n/a (critical 9.8)
- [CVE-2022-22823](https://insights.sbomify.com/CVE-2022-22823/): build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. (critical 9.8)
- [CVE-2022-22824](https://insights.sbomify.com/CVE-2022-22824/): Integer overflow in n/a (critical 9.8)
- [CVE-2019-13918](https://insights.sbomify.com/CVE-2019-13918/): Auth bypass in SINEMA Remote Connect Server (critical 9.8)
- [CVE-2024-39872](https://insights.sbomify.com/CVE-2024-39872/): Privilege escalation in SINEMA Remote Connect Server (critical 9.3)
- [CVE-2021-20093](https://insights.sbomify.com/CVE-2021-20093/): Information disclosure in Wibu-Systems CodeMeter (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/products/siemens/sinema-remote-connect-server/