Medium severity · published Jun 14, 2022
CVE-2022-32259
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1)
6.5
CVSS
0.6%
EPSS
No
On KEV
Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for installation or update of the affected application contain unit test scripts with sensitive information. An attacker could gain information about testing architecture and also tamper with test configuration.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SR
Sinema Remote Connect Server · Siemens
before 3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-32259
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-32259
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-484086.html
Patch
https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
More from Sinema Remote Connect Server
9.0
CVE-2021-40438
mod_proxy SSRF
9.9
CVE-2024-39872
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)
9.8
CVE-2022-32257
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2)
9.8
CVE-2022-32262
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1)
9.8
CVE-2022-32260
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)