CoreCVE
Back

HIGH

A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions)

Published Mar 8, 2022

Description

A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). The affected software do not properly check privileges between users during the same web browser session, creating an unintended sphere of control. This could allow an authenticated low privileged user to achieve privilege escalation.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner siemens
Published Mar 8, 2022
Updated Apr 21, 2025
Reserved Feb 17, 2022
Link CVE-2022-25311

CISA Vulnrichment

Updated Apr 18, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-25311

Red Hat

No data

ENISA EUVD

Assigner siemens
Published Mar 8, 2022
Updated Apr 21, 2025
Link EUVD-2022-29995

GitHub

No data