{"id":"CVE-2022-32252","aliases":["EUVD-2022-53449","GHSA-3rrg-9ph6-24px"],"status":"published","title":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.1). The...","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.1). The application does not perform the integrity check of the update packages. Without validation, an admin user might be tricked to install a malicious package, granting root privileges to an attacker.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00367,"percentile":0.30916,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-345"],"published":"2022-06-14T09:22:03Z","modified":"2026-06-17T04:46:58Z","products":[{"vendor":"siemens","product":"sinema remote connect server"},{"vendor":"siemens","product":"sinema_remote_connect_server"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-484086.html","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32252"},{"url":"https://github.com/advisories/GHSA-3rrg-9ph6-24px"}],"sources":{"cve":[{"id":"CVE-2022-32252","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.1). The application does not perform the integrity check of the update packages. Without validation, an admin user might be tricked to install a malicious package, granting root privileges to an attacker.","status":"published","published":"2022-06-14T09:22:03Z","modified":"2024-08-03T07:39:50.919Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"medium","assessor":"cna"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:34:36.917505Z"}],"euvd":[{"id":"EUVD-2022-53449","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.1). The application does not perform the integrity check of the update packages. Without validation, an admin user might be tricked to install a malicious package, granting root privileges to an attacker.","status":"published","published":"2022-06-14T09:22:03Z","modified":"2024-08-03T07:39:50Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"medium"}],"updated_at":"2026-11-03T03:25:32.463125Z"}],"ghsa":[{"id":"GHSA-3rrg-9ph6-24px","title":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.1). The...","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.1). The application does not perform the integrity check of the update packages. Without validation, an admin user might be tricked to install a malicious package, granting root privileges to an attacker.","status":"published","published":"2022-06-15T00:00:28Z","modified":"2024-07-09T12:31:56Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:57:39.788243Z"}],"nvd":[{"id":"CVE-2022-32252","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.1). The application does not perform the integrity check of the update packages. Without validation, an admin user might be tricked to install a malicious package, granting root privileges to an attacker.","status":"published","published":"2022-06-14T10:15:20.763Z","modified":"2026-06-17T04:46:58.657Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:07:22.232533Z"}]}}