Information Disclosure Vulnerability in SINEMA Remote Connect Server by Siemens

CVE-2022-32258

What is CVE-2022-32258?

A vulnerability has been identified in the SINEMA Remote Connect Server that affects all versions prior to 3.1. This weakness stems from an outdated feature allowing device configuration imports through a specific endpoint. If exploited, this vulnerability could lead to the disclosure of sensitive information, potentially compromising the security of the environment where the application is deployed.

References