CVE-2022-32257: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web service that lacks proper…

critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to resources and potentially lead to code execution.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
siemens	sinema_remote_connect_server	< V3.2	V3.2
siemens	sinema_remote_connect_server	< 3.2	3.2