VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jun 14, 2022· Updated Jun 17, 2026

CVE-2022-27220

CVE-2022-27220

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is missing general HTTP security headers in the web server configured on port 6220. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors.

Affected products

5
  • Siemens Foundation/Sinema Remote Connect Server5 versions
    cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*range: <3.0
    • cpe:2.3:a:siemens:sinema_remote_connect_server:3.0:-:*:*:*:*:*:*
    • cpe:2.3:a:siemens:sinema_remote_connect_server:3.0:sp1:*:*:*:*:*:*
    • (no CPE)range: < V3.0 SP2
    • (no CPE)range: All versions < V3.0 SP2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.