{"id":"CVE-2022-32260","aliases":["EUVD-2022-53457","GHSA-wvgf-xgq8-6r6j"],"status":"published","title":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.1). The...","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.2 SP1). The affected application creates temporary user credentials for UMC (User Management Component) users. An attacker could use these temporary credentials for authentication bypass in certain scenarios.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00777,"percentile":0.56106,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-286"],"published":"2022-06-14T09:22:14Z","modified":"2026-06-17T04:47:00Z","products":[{"vendor":"siemens","product":"sinema remote connect server"},{"vendor":"siemens","product":"sinema_remote_connect_server"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-381581.html","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32260"},{"url":"https://github.com/advisories/GHSA-wvgf-xgq8-6r6j"}],"sources":{"cve":[{"id":"CVE-2022-32260","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.2 SP1). The affected application creates temporary user credentials for UMC (User Management Component) users. An attacker could use these temporary credentials for authentication bypass in certain scenarios.","status":"published","published":"2022-06-14T09:22:14Z","modified":"2024-08-03T07:39:50.426Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"medium","assessor":"cna"}],"cwes":["CWE-286"],"updated_at":"2026-11-02T14:34:36.917505Z"}],"euvd":[{"id":"EUVD-2022-53457","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.2 SP1). The affected application creates temporary user credentials for UMC (User Management Component) users. An attacker could use these temporary credentials for authentication bypass in certain scenarios.","status":"published","published":"2022-06-14T09:22:14Z","modified":"2024-08-03T07:39:50Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"medium"}],"updated_at":"2026-11-03T03:25:32.463125Z"}],"ghsa":[{"id":"GHSA-wvgf-xgq8-6r6j","title":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.1). The...","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.1). The affected application creates temporary user credentials for UMC (User Management Component) users. An attacker could use these temporary credentials for authentication bypass in certain scenarios.","status":"published","published":"2022-06-15T00:00:29Z","modified":"2024-07-09T12:30:55Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-286"],"updated_at":"2026-11-02T14:57:39.788243Z"}],"nvd":[{"id":"CVE-2022-32260","description":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions \u003c V3.2 SP1). The affected application creates temporary user credentials for UMC (User Management Component) users. An attacker could use these temporary credentials for authentication bypass in certain scenarios.","status":"published","published":"2022-06-14T10:15:21.157Z","modified":"2026-06-17T04:47:00.173Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-286"],"updated_at":"2026-11-02T14:07:22.232533Z"}]}}