Siemens SINEMA Remote Connect Server
view advisory published 2022-02-08
An open redirect vulnerability in SINEMA Remote Connect Server could allow an attacker to steal logon credentials with a specially crafted malicious link. Siemens has released software update for the SINEMA Remote Connect Server and recommends to update to the latest version.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-23102US | medium6.1 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacker could trick a valid… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-654775: Open Redirect Vulnerability in SINEMA Remote Connect Server - CSAF Versionself
- SSA-654775: Open Redirect Vulnerability in SINEMA Remote Connect Server - PDF Versionself
- SSA-654775: Open Redirect Vulnerability in SINEMA Remote Connect Server - TXT Versionself
- ICS Advisory ICSA-22-041-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-041-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- FixedSINEMA Remote Connect Server
Update to V2.0 or later version
https://support.industry.siemens.com/cs/document/109793790/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan