CVE-2022-32257

9.8 criticalEPSS 0.8%

Critical (9.8) in siemens sinema remote connect server. EPSS 0.8% chance of exploitation in the next 30 days.

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to resources and potentially lead to code execution.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2024-03-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:sinema_remote_connect_server

References

https://cert-portal.siemens.com/productcert/html/ssa-576771.html
https://cert-portal.siemens.com/productcert/html/ssa-576771.html

Check your stack JSON