CVE-2022-32252

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The application does not perform the integrity check of the update packages. Without validation, an admin user might be tricked to install a malicious package, granting root privileges to an attacker.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-345

Affected software

No affected versions have been published.

Timeline

Published
Jun 14, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-322537.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). Due to improper input validation, the OpenSSL cerCVE-2022-322547.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). A customized HTTP POST request could force the apCVE-2022-322555.3A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web servicCVE-2022-322566.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web servicCVE-2022-322579.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web servicCVE-2022-322587.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains an older featurCVE-2022-322596.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for installation or update of tCVE-2022-32267.2An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older thanCVE-2022-322609.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application creates temporary usCVE-2022-322617.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a misconfiguratCVE-2022-322629.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a file upload sCVE-2022-322637.5Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719.
CVE-2022-32252: High severity, CVSS 7.8 | Vulnix