6.1
Moyenne
CVE-2022-29034 A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1)
Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An error message pop up window in the web interface of the affected application does not prevent injection of JavaScript code. This could allow attackers to perform reflected cross-site scripting (XSS) attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SINEMA Remote Connect Server 3.1 | premières → < 3.1 | 3.1 |
| sinema_remote_connect_server 3.1 | premières → < 3.1 | 3.1 |
Références
- cert-portal.siemens.com cert-portal.siemens.com
- 20220614 SEC Consult SA-20220614-0 :: Reflected Cross Site Scripting in SIEMENS-SINEMA Remote Connect seclists.org
- packetstormsecurity.com packetstormsecurity.com
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SINEMA Remote Connect Server
Les 46 CVE de SINEMA Remote Connect Server →
CVE-2025-40819
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4)
4.3
Moyenne
CVE-2025-40818
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4)
3.3
Faible
CVE-2024-42345
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2)
4.3
Moyenne
CVE-2024-39876
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)
4.0
Moyenne