Access Control Vulnerability in SINEMA Remote Connect Server by Siemens

CVE-2022-32256

What is CVE-2022-32256?

A security flaw has been discovered in the SINEMA Remote Connect Server prior to version 3.1. This vulnerability arises from insufficient access control measures, which allow low privileged users to gain access to endpoints intended for higher privileges. If exploited, this loophole could expose sensitive data, potentially compromising the integrity of operations that rely on the confidentiality of privileged information.

References