Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-32260

Опубликовано: 14 июн. 2022
Источник: nvd
CVSS3: 6.5
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application creates temporary user credentials for UMC (User Management Component) users. An attacker could use these temporary credentials for authentication bypass in certain scenarios.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*
Версия до 3.1 (исключая)

EPSS

Процентиль: 28%
0.00099
Низкий

6.5 Medium

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-286
NVD-CWE-Other

Связанные уязвимости

CVSS3: 9.8
github
больше 3 лет назад

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application creates temporary user credentials for UMC (User Management Component) users. An attacker could use these temporary credentials for authentication bypass in certain scenarios.

EPSS

Процентиль: 28%
0.00099
Низкий

6.5 Medium

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-286
NVD-CWE-Other