High severity7.2NVD Advisory· Published Mar 8, 2022· Updated Jun 17, 2026

CVE-2022-24281

Description

A vulnerability has been identified in SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). A privileged authenticated attacker could execute arbitrary commands in the local database by sending specially crafted requests to the webserver of the affected application.

Affected products

Siemens Foundation/Sinec Network Management System
cpe:2.3:a:siemens:sinec_network_management_system:*:*:*:*:*:*:*:*
Range: <1.0.3
Siemens Foundation/Sinec Nmsllm-fuzzy2 versions
<V1.0.3+ 1 more
- (no CPE)range: <V1.0.3
- (no CPE)range: All versions < V1.0.3
Siemens Foundation/Sinema Serverllm-fuzzy2 versions
V14+ 1 more
- (no CPE)range: V14
- (no CPE)range: All versions

Patches

Vulnerability mechanics

References

cert-portal.siemens.com/productcert/pdf/ssa-250085.pdfnvdMitigationVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000