6.5
CVSSv2

CVE-2022-24281

Published: 08/03/2022 Updated: 14/03/2023
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

A vulnerability has been identified in SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). A privileged authenticated attacker could execute arbitrary commands in the local database by sending specially crafted requests to the webserver of the affected application.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

siemens sinec network management system

ICS Advisories

Siemens SINEC NMS
Critical Infrastructure Sectors: Energy