Headline
CVE-2022-27219
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is missing general HTTP security headers in the web server configured on port 443. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors.
%PDF-1.5 %���� 1 0 obj << /D [2 0 R /XYZ 70.866 771.024 null] >> endobj 3 0 obj << /D [2 0 R /XYZ 70.866 630.026 null] >> endobj 4 0 obj << /D [2 0 R /XYZ 70.866 559.974 null] >> endobj 5 0 obj << /D [2 0 R /XYZ 70.866 433.119 null] >> endobj 6 0 obj << /D [2 0 R /XYZ 70.866 374.036 null] >> endobj 7 0 obj << /D [8 0 R /XYZ 85.039 438.993 null] >> endobj 9 0 obj << /D [8 0 R /XYZ 70.866 251.556 null] >> endobj 10 0 obj << /S /GoTo /D [2 0 R /Fit] >> endobj 2 0 obj << /Contents 11 0 R /Type /Page /Resources 12 0 R /Parent 13 0 R /Annots [14 0 R 15 0 R 16 0 R 17 0 R 18 0 R 19 0 R 20 0 R] /MediaBox [0 0 595.276 841.89] >> endobj 14 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109793790/) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 458.519 518.276 469.936] >> endobj 16 0 obj << /A << /S /GoTo /D (section*.2) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [386.143 390.853 524.579 402.39] >> endobj 17 0 obj << /A << /S /GoTo /D (section*.4) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [147.498 373.04 309.548 384.457] >> endobj 18 0 obj << /A << /S /URI /Type /Action /URI (https://www.siemens.com/cert/operational-guidelines-industrial-security) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [164.798 281.964 487.754 293.501] >> endobj 19 0 obj << /A << /S /URI /Type /Action /URI (https://www.siemens.com/industrialsecurity) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [406.699 252.196 525.406 263.613] >> endobj 12 0 obj << /ProcSet [/PDF /Text] /Font << /F52 21 0 R /F49 22 0 R >> >> endobj 11 0 obj << /Filter /FlateDecode /Length 2904 >> stream xڵZ[s�8~ϯ�mqU[A7@]��I�{3����NoMM��I¶�=’��~?]�cg ����sttnr�=y�������G�