CVE-2022-27220: Medium severity siemens sinema remote connect vulnerability
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is missing general HTTP security headers in the web server configured on port 6220. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this SINEMA Remote Connect Server vulnerability?
The vulnerability ID is CVE-2022-27220.
What is the severity level of CVE-2022-27220?
The severity level of CVE-2022-27220 is medium, with a CVSS score of 4.3.
Which versions of SINEMA Remote Connect Server are affected by CVE-2022-27220?
All versions of SINEMA Remote Connect Server prior to V3.0 SP2 are affected, including V3.0 and V3.0 SP1.
What is the impact of CVE-2022-27220?
The vulnerability could aid attackers by making the servers more prone to clickjacking and channel downgrade attacks.
Are there any fixes or patches available for CVE-2022-27220?
Siemens has released a security advisory with recommendations to mitigate this vulnerability, which can be found at: https://cert-portal.siemens.com/productcert/pdf/ssa-911567.pdf