CVE-2022-32259

State
Published
Severity
6.5 Medium
Published
Jun 14, 2022
Updated
Aug 3, 2024
Reserved
Jun 2, 2022

Read the record on cve.org

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for installation or update of the affected application contain unit test scripts with sensitive information. An attacker could gain information about testing architecture and also tamper with test configuration.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:Csiemens

Weaknesses

  • CWE-1244 Internal Asset Exposed to Unsafe Debug Access Level or State

Affected Products

ProductVersions
SINEMA Remote Connect ServerSiemens
  • before V3.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.