CVE-2022-24281

HIGH

7.2

Description

A vulnerability has been identified in SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). A privileged authenticated attacker could execute arbitrary commands in the local database by sending specially crafted requests to the webserver of the affected application.

CVE Details

CVSS v3.1 Score7.2

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredHIGH

User InteractionNONE

Published3/8/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

siemens:sinec_network_management_system

Weaknesses (CWE)

CWE-89CWE-89

References

https://cert-portal.siemens.com/productcert/pdf/ssa-250085.pdf(productcert@siemens.com)

https://cert-portal.siemens.com/productcert/pdf/ssa-250085.pdf(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.