SSA-911567: Missing HTTP headers in SINEMA Remote Connect Server before V3.0 SP2
Advisory ansehen veröffentlicht 2022-06-14
SINEMA Remote Connect Server is missing HTTP security headers on the web server. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors. Siemens has released an update for the SINEMA Remote Connect Server and recommends to update to the latest version.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-27220US | medium4.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is missing general HTTP security headers in the web server confi… | ||||
| CVE-2022-27219US | medium4.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is missing general HTTP security headers in the web server confi… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (2)
- BehobenSINEMA Remote Connect Server
Update to V3.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793790/ - BehobenSINEMA Remote Connect Server
Update to V3.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793790/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan