CVE-2022-32261

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a misconfiguration in the APT update. This could allow an attacker to add insecure packages to the application.

Score

CVSS 3.1 7.5 High

Status

Modified - productcert@siemens.com

Published

2022-06-14

Last modified

2024-08-03

Weaknesses

CWE-233

Affected products

• Sinema Remote Connect Server (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-484086.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf