CVE-2022-32257
published 2024-03-12CVE-2022-32257: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web service that lacks proper…
PriorityP359critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.83%
53.5th percentile
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to resources and potentially lead to code execution.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | sinema_remote_connect_server | < V3.2 | V3.2 |
| siemens | sinema_remote_connect_server | < 3.2 | 3.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fjhw-c463-p66x: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3
ghsa_unreviewed·2024-03-12
CVE-2022-32257 [CRITICAL] CWE-284 GHSA-fjhw-c463-p66x: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to resources and potentially lead to code execution.
CISA ICS
Siemens SINEMA Remote Connect Server
cisa_ics·2024-03-14·CVSS 6.9
[MEDIUM] Siemens SINEMA Remote Connect Server
ICS Advisory
##
Siemens SINEMA Remote Connect Server
Release DateMarch 14, 2024
Alert CodeICSA-24-074-03
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SINEMA Remote Connect Server
- Vulnerabilities: Cross-site Scripting, Improper Access Control
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbi
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-03-12
Published