CVE-2022-29034 PUBLISHED CVSS 6.099999904632568 MEDIUM

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An error message pop up window in the web interface of the affected application does not prevent injection of JavaScript code. This could allow attackers to perform reflected cross-site scripting (XSS) attacks.

EPSS 7.05% · 91.4th percentile

Risk Scores

CVSS v3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
EPSS Score
7.05%
91.4th percentile

Affected Products

VendorProductVersions
siemenssinema_remote_connect_server0
siemenssinema_remote_connect_server0
SiemensSINEMA Remote Connect Server0

Timeline

References

…and 1 more

Open in Interactive Console →