CVEvulnerability
CVE-2022-32259
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-06-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-1244
Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for installation or update of the affected application contain unit test scripts with sensitive information. An attacker could gain information about testing architecture and also tamper with test configuration.
Affected configurations
• siemens sinema remote connect server (< 3.1)
Related
Weakness · CWE (1)
- CWE-1244 Internal Asset Exposed to Unsafe Debug Access Level or State weakness
References
- https://cert-portal.siemens.com/productcert/html/ssa-484086.html cert-portal.siemens.com
- https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf Patch, Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-484086.html cert-portal.siemens.com
- https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf Patch, Vendor Advisory