ID CVE-2022-32259
Summary A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for installation or update of the affected application contain unit test scripts with sensitive information. An attacker could gain information about testing architecture and also tamper with test configuration.
References
Vulnerable Configurations
  • cpe:2.3:a:siemens:sinema_remote_connect_server:-:*:*:*:*:*:*:*
    cpe:2.3:a:siemens:sinema_remote_connect_server:-:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:sinema_remote_connect_server:1.0:sp3_hf1:*:*:*:*:*:*
    cpe:2.3:a:siemens:sinema_remote_connect_server:1.0:sp3_hf1:*:*:*:*:*:*
  • cpe:2.3:a:siemens:sinema_remote_connect_server:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:siemens:sinema_remote_connect_server:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:sinema_remote_connect_server:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:siemens:sinema_remote_connect_server:1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:sinema_remote_connect_server:1.3:*:*:*:*:*:*:*
    cpe:2.3:a:siemens:sinema_remote_connect_server:1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:sinema_remote_connect_server:2.0:-:*:*:*:*:*:*
    cpe:2.3:a:siemens:sinema_remote_connect_server:2.0:-:*:*:*:*:*:*
  • cpe:2.3:a:siemens:sinema_remote_connect_server:2.0:hf1:*:*:*:*:*:*
    cpe:2.3:a:siemens:sinema_remote_connect_server:2.0:hf1:*:*:*:*:*:*
  • cpe:2.3:a:siemens:sinema_remote_connect_server:3.0:*:*:*:*:*:*:*
    cpe:2.3:a:siemens:sinema_remote_connect_server:3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:sinema_remote_connect_server:3.0:sp1:*:*:*:*:*:*
    cpe:2.3:a:siemens:sinema_remote_connect_server:3.0:sp1:*:*:*:*:*:*
CVSS
Base: 6.4 (as of 24-07-2023 - 13:30)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:N
Last major update 24-07-2023 - 13:30
Published 14-06-2022 - 10:15
Last modified 24-07-2023 - 13:30
Back to Top