CVE-2022-30527: High severity siemens sinec nms sp1 update 1 vulnerability
A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application assigns improper access rights to specific folders containing executable files and libraries. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-30527?
CVE-2022-30527 is a vulnerability identified in SINEC NMS that allows an authenticated local attacker to inject arbitrary code and escalate privileges.
What is the severity of CVE-2022-30527?
The severity of CVE-2022-30527 is high with a CVSS score of 7.8.
How does CVE-2022-30527 affect SINEC NMS?
CVE-2022-30527 affects all versions of SINEC NMS prior to version 2.0 by assigning improper access rights to specific folders containing executable files and libraries.
How can an attacker exploit CVE-2022-30527?
An authenticated local attacker can exploit CVE-2022-30527 by injecting arbitrary code and escalating privileges.
Is there a fix available for CVE-2022-30527?
Yes, upgrading to version 2.0 or newer of SINEC NMS resolves CVE-2022-30527.