PT-2022-21184 · Siemens · Sinema Remote Connect Server

Published 2022-06-14 · Updated 2024-07-09 · CVE-2022-32259

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V3.1

Description A vulnerability has been identified where system images for installation or update of the affected application contain unit test scripts with sensitive information. An attacker could gain information about testing architecture and also tamper with test configuration.

Recommendations For versions prior to V3.1, update to version V3.1 or later to resolve the issue. As a temporary workaround, consider removing or securing the unit test scripts from the system images to prevent information disclosure and tampering. Restrict access to the system images and the affected application to minimize the risk of exploitation.

Fix

Unsafe Debug Access Level

Weakness Enumeration

CWE-1244

Related Identifiers

CVE-2022-32259

Affected Products

Sinema Remote Connect Server

References · 5

• https://osv.dev/vulnerability/CVE-2022-32259 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32259 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-484086.html · Note
• https://t.me/cibsecurity/44368 · Telegram Post