CVE-2022-27221
Assigner: siemens
Published: 2022-06-14T09:21:43
State: PUBLISHED
affected: product: SINEMA Remote Connect Server
vendor: Siemens
versions: status: affected
version: All versions < V3.1
descriptions: value: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An attacker in machine-in-the-middle could obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a "BREACH" attack.
problemTypes: descriptions: cweId: CWE-310
description: CWE-310: Cryptographic Issues
type: CWE