SINEMA Remote Connect Server < V3.2 SP4: DB License Bypass
CVE-2025-40819 Published on December 9, 2025
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications do not properly validate license restrictions against the database, allowing direct modification of the system_ticketinfo table to bypass license limitations without proper enforcement checks. This could allow with database access to circumvent licensing restrictions by directly modifying database values and potentially enabling unauthorized use beyond the permitted scope.
Weakness Type
What is an AuthZ Vulnerability?
The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
CVE-2025-40819 has been classified to as an AuthZ vulnerability or weakness.
Products Associated with CVE-2025-40819
Want to know whenever a new CVE is published for Siemens Sinema Remote Connect Server? stack.watch will email you.
Affected Versions
Siemens SINEMA Remote Connect Server:- Before V3.2 SP4 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.