Sensitive Information Exposure in SINEMA Remote Connect Server by Siemens
CVE-2022-32259

6.5MEDIUM

Key Information:

Vendor

Siemens
Status
Sinema Remote Connect Server
Vendor
CVE Published:
14 June 2022

What is CVE-2022-32259?

A vulnerability has been discovered in the SINEMA Remote Connect Server that affects all versions prior to 3.1. The installation or update images of the application contain unit test scripts that expose sensitive information, including details about the testing architecture. This could potentially allow an attacker to manipulate the test configurations and gain unauthorized insights, posing risks to the security and integrity of the system.

Affected Version(s)

SINEMA Remote Connect Server 0

References

https://cert-portal.siemens.com/productcert/pdf/ssa-48408...
x_refsource_MISC
https://cert-portal.siemens.com/productcert/html/ssa-4840...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.