A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). The affected software do not properly check privileges between users during the same web browser session, creating an unintended sphere of control. This could allow an authenticated low privileged user to achieve privilege escalation.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-250085.pdf | Mitigation Vendor Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-250085.pdf | Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:51
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert-portal.siemens.com/productcert/pdf/ssa-250085.pdf - Mitigation, Vendor Advisory |
10 Oct 2023, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-269 | |
| Summary | A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). The affected software do not properly check privileges between users during the same web browser session, creating an unintended sphere of control. This could allow an authenticated low privileged user to achieve privilege escalation. |
10 Jul 2023, 19:34
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Siemens sinema Server
|
|
| CPE | cpe:2.3:a:siemens:sinema_server:14.0:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-Other |
Information
Published : 2022-03-08 12:15
Updated : 2024-11-21 06:51
NVD link : CVE-2022-25311
Mitre link : CVE-2022-25311
CVE.ORG link : CVE-2022-25311
JSON object : View
Products Affected
siemens
- sinema_server
- sinec_network_management_system
CWE