CVE-2022-30527

HIGH

SINEC NMS < 2.0 - Authenticated Privilege Escalation via Improper Folder Permissions

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application assigns improper access rights to specific folders containing executable files and libraries. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0016
EPSS Percentile 5.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-732
Status published
Products (1)
siemens/sinec_nms < 2.0
Published Oct 10, 2023
Tracked Since Feb 18, 2026