CVE-2022-32262

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a file upload server that is vulnerable to command injection. An attacker could use this to achieve arbitrary code execution.

Score

CVSS 3.1 9.8 Critical

Status

Modified - productcert@siemens.com

Published

2022-06-14

Last modified

2025-04-21

Weaknesses

CWE-77

Affected products

• Sinema Remote Connect Server (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-484086.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf