CVE-2022-32252: Critical severity siemens sinema remote connect vulnerability
Published Jun 14, 2022
·Updated
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The application does not perform the integrity check of the update packages. Without validation, an admin user might be tricked to install a malicious package, granting root privileges to an attacker.
Affected Software
1 affected component
Siemens SINEMA Remote Connect Server<3.1
Remediation
Event History
Jun 14, 2022
CVE Published
via MITRE·09:22 AM
Data Sourced
via MITRE·09:22 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-32252.
2
What is the severity of CVE-2022-32252?
The severity of CVE-2022-32252 is critical with a CVSS score of 7.8.
3
Which software versions are affected by CVE-2022-32252?
All versions of Siemens SINEMA Remote Connect Server prior to V3.1 are affected by CVE-2022-32252.
4
What is the impact of CVE-2022-32252?
The impact of CVE-2022-32252 is that an attacker could trick an admin user into installing a malicious package, granting root privileges.
5
Is there a fix available for CVE-2022-32252?
Yes, upgrading to version 3.1 or above of Siemens SINEMA Remote Connect Server will fix the vulnerability.