Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-40818

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications contain private SSL/TLS keys on the server that are not properly protected allowing any user with server access to read these keys. This could allow an authenticated attacker to impersonate the server potentially enabling man-in-the-middle, traffic decryption or unauthorized access to services that trust these certificates.

Published

2025-12-09T16:17:46.040

Last Modified

2025-12-10T21:42:48.550

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 3.3 (LOW)

Weaknesses
  • Type: Primary
    CWE-732
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application siemens sinema_remote_connect_server < 3.2 Yes
Application siemens sinema_remote_connect_server 3.2 Yes
Application siemens sinema_remote_connect_server 3.2 Yes
Application siemens sinema_remote_connect_server 3.2 Yes
References