CVE-2022-32255

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to limited information.

Score

CVSS 3.1 5.3 Medium

Status

Modified - productcert@siemens.com

Published

2022-06-14

Last modified

2024-08-03

Weaknesses

CWE-284

Affected products

• Sinema Remote Connect Server (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-484086.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf