packetstormsecurity.com
http://packetstormsecurity.com/files/165966/SIEMENS-SINEMA-Remote-Connect-1.0-SP3-HF1-Open-Redirection.html CVE-2022-23102
MEDIUMNuclei
SINEMA Remote Connect Server < V2.0 - Open Redirect
Record summary
CVE-2022-23102 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.
Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious link there by leading to phishing attacks.
Description source: CVE List
Exploitation context
Available material
- Nuclei templates
- 1
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
SINEMA Remote Connect ServerBrowse Siemens / SINEMA Remote Connect Server | CVE List | All versions < V2.0 | affected |
Nuclei templates
1ProjectDiscoveryMEDIUMSINEMA Remote Connect Server < V2.0 - Open RedirectCVSS 6.1
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious link there by leading to phishing attacks.
Impact
An attacker can exploit this vulnerability to redirect users to malicious websites, leading to potential phishing attacks.
Remediation
Upgrade to SINEMA Remote Connect Server version 2.0 or later to fix the open redirect vulnerability.
WeaknessesCWE-601
Authorsctflearner, ritikchaddha
Template tagscvecve2022packetstormseclistsredirectsinemaauthenticatedsiemensvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*
Shodan: title:"Logon - SINEMA Remote Connect"
Shodan: http.title:"logon - sinema remote connect"
FOFA: title="logon - sinema remote connect"
Google: intitle:"logon - sinema remote connect"
https://nvd.nist.gov/vuln/detail/cve-2022-23102 https://packetstormsecurity.com/files/165966/SIEMENS-SINEMA-Remote-Connect-1.0-SP3-HF1-Open-Redirection.html https://seclists.org/fulldisclosure/2022/Feb/20 https://cert-portal.siemens.com/productcert/pdf/ssa-654775.pdf https://github.com/ARPSyndicate/cvemon
Source: ProjectDiscovery
References
420220210 SEC Consult SA-20220209 :: Open Redirect in Login Page in SIEMENS-SINEMA Remote Connectmailing list
http://seclists.org/fulldisclosure/2022/Feb/20 cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/pdf/ssa-654775.pdf nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-23102