CVE-2022-32259: Medium severity siemens sinema remote connect vulnerability

Q: What is the severity of CVE-2022-32259?

The severity of CVE-2022-32259 is medium.

Q: What is the affected software of CVE-2022-32259?

The affected software of CVE-2022-32259 is Siemens SINEMA Remote Connect Server (versions < V3.1).

Q: What is the CWE of CVE-2022-32259?

The CWE of CVE-2022-32259 is CWE-1244.

Q: How can an attacker exploit CVE-2022-32259?

An attacker can exploit CVE-2022-32259 by gaining information about testing architecture and tampering with the system images for SINEMA Remote Connect Server.

Q: Is there a fix available for CVE-2022-32259?

Yes, Siemens has provided a fix for CVE-2022-32259. Please refer to the Siemens product security advisory for more information.

Published Jun 14, 2022

Updated

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for installation or update of the affected application contain unit test scripts with sensitive information. An attacker could gain information about testing architecture and also tamper with test configuration.

Affected Software

1 affected component

Siemens SINEMA Remote Connect Server<3.1

Remediation

Patch Available

https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf

Event History

Jun 14, 2022

CVE Published

via MITRE·09:22 AM

Data Sourced

via MITRE·09:22 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-32259?

The severity of CVE-2022-32259 is medium.

What is the affected software of CVE-2022-32259?

The affected software of CVE-2022-32259 is Siemens SINEMA Remote Connect Server (versions < V3.1).

What is the CWE of CVE-2022-32259?