CVE-2022-27220: siemens sinema_remote_connect_server
Vulnerability summary
CVE-2022-27220 is a medium (CVSS 4.3) vulnerability in siemens sinema_remote_connect_server. EPSS estimates a 0.68% chance of exploitation in the next 30 days, higher than 51.5% of scored vulnerabilities.
Timeline
- 14-06-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is missing general HTTP security headers in the web server configured on port 6220. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.68%
Chance of exploitation in the next 30 days
Percentile
52%
Versus all other CVEs
30-day change
+0.02 pp
From 0.66% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-358Improperly Implemented Security Check for StandardThe product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.
- CWE-1021Improper Restriction of Rendered UI Layers or FramesThe web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.
Affected systems
Siemens1 product
- sinema_remote_connect_serverAll versions < V3.0 SP2 | < 3.0 | 3.0 | 3.0:sp1
1 vendor · 1 product