CVE-2022-45092: Path Traversal
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1). An authenticated remote attacker with access to the Web Based Management (443/tcp) of the affected product, could potentially read and write arbitrary files from and to the device's file system. An attacker might leverage this to trigger remote code execution on the affected component.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2022-45092.
What is the affected product for this vulnerability?
The affected product for this vulnerability is Siemens Sinec Ins.
What is the severity level of CVE-2022-45092?
The severity level of CVE-2022-45092 is critical.
How does this vulnerability impact the affected product?
This vulnerability allows an authenticated remote attacker to read and write arbitrary files from and to the device's file system.
Is there a fix available for this vulnerability?
The fix for this vulnerability is included in the V1.0 SP2 Update 1 version of Siemens Sinec Ins.