CVE-2022-25311

Katalog CVE

CVSS 7.3 · High EPSS 0,54%

Kerentanan Improper Privilege Management pada siemens sinec network management system, siemens sinema server. Skor CVSS 3.1 7.3 (High) menurut siemens.com.

Deskripsi (NVD)

A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). The affected software do not properly check privileges between users during the same web browser session, creating an unintended sphere of control. This could allow an authenticated low privileged user to achieve privilege escalation.

Rincian

Terbit di NVD

8 Maret 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.3 (High), sumber siemens.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

0,54% peluang dieksploitasi; lebih tinggi dari 43,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cert-portal.siemens.com/productcert/pdf/ssa-250085.pdf mitigasi · advisory vendor