5.9
Moyenne
CVE-2022-27221 A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1)
Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An attacker in machine-in-the-middle could obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a "BREACH" attack.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SINEMA Remote Connect Server 3.1 | premières → < 3.1 | 3.1 |
Références
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SINEMA Remote Connect Server
Les 46 CVE de SINEMA Remote Connect Server →
CVE-2025-40819
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4)
4.3
Moyenne
CVE-2025-40818
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4)
3.3
Faible
CVE-2024-42345
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2)
4.3
Moyenne
CVE-2024-39876
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)
4.0
Moyenne