Vulnerability Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious link there by leading to phishing attacks.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Sinema Remote Connect Server | <= 2.0 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/165966/SIEMENS-SINEMA-Remote-Connect-1.0-SPExploitThird Party Advisory
- http://seclists.org/fulldisclosure/2022/Feb/20ExploitThird Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-654775.pdfPatchVendor Advisory
- http://packetstormsecurity.com/files/165966/SIEMENS-SINEMA-Remote-Connect-1.0-SPExploitThird Party Advisory
- http://seclists.org/fulldisclosure/2022/Feb/20ExploitThird Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-654775.pdfPatchVendor Advisory
FAQ
What is CVE-2022-23102?
CVE-2022-23102 is a vulnerability with a CVSS score of 6.1 (MEDIUM). A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user ...
How severe is CVE-2022-23102?
CVE-2022-23102 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-23102?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Sinema Remote Connect Server.