PT-2023-13009 · Sinec Nms · Sinec Nms

Thomas Riedmaier · Publicado 2023-10-10 · Atualizado 2024-07-09 · CVE-2022-30527

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SINEC NMS versions prior to V2.0

Description A vulnerability has been identified in the affected application, where it assigns improper access rights to specific folders containing executable files and libraries. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.

Recommendations For versions prior to V2.0, update to version V2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the folders containing executable files and libraries to prevent privilege escalation.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2022-30527

Produtos afetados

Sinec Nms

Referências · 5

• https://osv.dev/vulnerability/CVE-2022-30527 · Aviso do Fabricante
• https://cert-portal.siemens.com/productcert/pdf/ssa-160243.pdf · Aviso do Fabricante
• https://cert-portal.siemens.com/productcert/html/ssa-160243.html · Nota
• https://t.me/cibsecurity/71912 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-30527 · Nota de Segurança