CVE-2022-29034: XSS
First published: Tue Jun 14 2022(Updated: )
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An error message pop up window in the web interface of the affected application does not prevent injection of JavaScript code. This could allow attackers to perform reflected cross-site scripting (XSS) attacks.
Credit: productcert@siemens.com productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens SINEMA Remote Connect Server | <3.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this SINEMA Remote Connect Server vulnerability?
The vulnerability ID for this SINEMA Remote Connect Server vulnerability is CVE-2022-29034.
What is the severity rating of CVE-2022-29034?
The severity rating of CVE-2022-29034 is medium with a CVSS score of 6.1.
What is the affected version of SINEMA Remote Connect Server?
All versions prior to V3.1 are affected by this vulnerability.
What is the impact of this vulnerability?
This vulnerability allows attackers to perform reflected cross-site scripting (XSS) attacks.
How can I fix CVE-2022-29034 in SINEMA Remote Connect Server?
To fix CVE-2022-29034, it is recommended to update SINEMA Remote Connect Server to version 3.1 or higher.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/tags
- agent/references
- agent/first-publish-date
- agent/event
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/siemens
- canonical/siemens sinema remote connect server