Misconfiguration in SINEMA Remote Connect Server Affects Siemens Products
CVE-2022-32261

5.3MEDIUM

Key Information:

Vendor
Siemens
Status
Sinema Remote Connect Server
Vendor
CVE Published:
14 June 2022

Summary

A vulnerability has been found in the SINEMA Remote Connect Server affecting all versions prior to 3.1. This misconfiguration in the APT update mechanism allows an attacker to potentially introduce insecure packages into the application, compromising the integrity and security posture of affected systems. It is vital for users of this software to assess their current version and implement appropriate security measures.

Affected Version(s)

SINEMA Remote Connect Server 0

References

https://cert-portal.siemens.com/productcert/pdf/ssa-48408...
x_refsource_MISC
https://cert-portal.siemens.com/productcert/html/ssa-4840...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.