CVE-2022-32258

Summary

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains an older feature that allows to import device configurations via a specific endpoint. An attacker could use this vulnerability for information disclosure.

Affected Software

VendorProductVersion RangeStatus
SiemensSINEMA Remote Connect Server0 < V3.1affected

Weaknesses

  • CWE-448: CWE-448: Obsolete Feature in UI

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

CVE Program Container

Additional References

References