Summary
SINEMA Remote Connect Server is missing HTTP security headers on the web server. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors.
Siemens has released an update for the SINEMA Remote Connect Server and recommends to update to the latest version.
Vulnerabilities 2
-
Unscored —
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is …
-
Unscored —
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is …
Revision history
-
#1
Publication Date
References
-
SSA-911567: Missing HTTP headers in SINEMA Remote Connect Server before V3.0 SP2 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-911567.pdf
-
SSA-911567: Missing HTTP headers in SINEMA Remote Connect Server before V3.0 SP2 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-911567.txt