CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.6. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-39872
Severity
CRITICAL
CVSS
9.6
EPSS
0.47%
Original NVD Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly assign rights to temporary files created during its update process. This could allow an authenticated attacker with the 'Manage firmware updates' role to escalate their privileges on the underlying OS level.
Related CVEs
Other vulnerabilities affecting the same vendor(s)