CVE-2022-23102

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious link there by leading to phishing attacks.

Affected products

• Siemens / SINEMA Remote Connect ServerAll versions < V2.0 – All versions < V2.0

Exploits & proofs of concept

• nucleiSINEMA Remote Connect Server < V2.0 - Open Redirectby ctflearner,ritikchaddha

References

• MISChttps://cert-portal.siemens.com/productcert/pdf/ssa-654775.pdf
• MAILING_LISThttp://seclists.org/fulldisclosure/2022/Feb/20
• EXPLOIThttp://packetstormsecurity.com/files/165966/SIEMENS-SINEMA-Remote-Connect-1.0-SP3-HF1-Open-Redirection.html