CVE-2022-25311: High severity siemens sinec nms vulnerability
A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). The affected software do not properly check privileges between users during the same web browser session, creating an unintended sphere of control. This could allow an authenticated low privileged user to achieve privilege escalation.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-25311.
What is the severity of CVE-2022-25311?
The severity of CVE-2022-25311 is high (7.3).
Which software versions are affected by CVE-2022-25311?
All versions of SINEC NMS >= V1.0.3 < V2.0 and all versions of SINEMA Server V14 are affected by CVE-2022-25311.
What is the impact of CVE-2022-25311?
CVE-2022-25311 allows unauthorized privilege escalation, potentially leading to unauthorized access and control of the affected software.
Is there a fix for CVE-2022-25311?
The vendor has provided a fix for CVE-2022-25311. Please refer to the vendor's advisory for more information.