CVE-2022-30527

HIGH

Siemens Sinec Nms < 2.0 - Incorrect Permission Assignment

Title source: rule
STIX 2.1

Description

A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application assigns improper access rights to specific folders containing executable files and libraries. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0008
EPSS Percentile 23.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-732
Status published
Products (1)
siemens/sinec_nms < 2.0
Published Oct 10, 2023
Tracked Since Feb 18, 2026