SSA-911567 V1.0: Missing HTTP headers in SINEMA Remote Connect Server before V3.0 SP2

Risk Summary

<p>SINEMA Remote Connect Server is missing HTTP security headers on the web server. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors.</p> <p>Siemens has released an update for the SINEMA Remote Connect Server and recommends to update to the latest version.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)