CVE-2022-23102CWE-601

CVE-2022-23102: vulnerability in Siemens SINEMA Remote Connect Server

Published · Updated

Follow this CVE+ Monitor SINEMA Remote Connect Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 4.7%
In short

SINEMA Remote Connect Server versions before 2.0 contain an open redirect flaw that allows attackers to trick authenticated users into clicking malicious links, potentially leading to phishing attacks where users are redirected to attacker-controlled sites.

Technical detail

Open redirect vulnerability in SINEMA Remote Connect Server (versions < 2.0) allows authenticated attackers to craft malicious URLs that redirect users to external sites; attack vector is social engineering via phishing links, requiring user interaction to click the crafted URL, with impact being credential theft or malware infection through phishing.

Summary generated and translated by AI from the official description.
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious link there by leading to phishing attacks.
Affected products
Siemens · SINEMA Remote Connect Server
Related CVEs — Siemens SINEMA Remote Connect Server

In the same product, most dangerous first.

CVE-2022-29034MEDIUMCVE-2022-29034EPSS 28.7%CVE-2022-32262HIGHCVE-2022-32262EPSS 2.5%CVE-2024-39570HIGHCVE-2024-39570EPSS 1.4%CVE-2019-6570—CVE-2019-6570EPSS 1.3%CVE-2024-39571HIGHCVE-2024-39571EPSS 1.3%CVE-2022-32251HIGHCVE-2022-32251EPSS 1.3%