← Database

CVE-2022-24281

HIGH CVSS: 7.2 Published: 2022-03-08 Modified: 2026-06-17

Description

A vulnerability has been identified in SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). A privileged authenticated attacker could execute arbitrary commands in the local database by sending specially crafted requests to the webserver of the affected application.

Affected Platforms

Siemens Sinec Network Management System

Weakness Type

CWE-89, CWE-89

References