CVE-2022-30527: A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application assigns improper access rights to specific folders containing…

high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application assigns improper access rights to specific folders containing executable files and libraries. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
siemens	sinec_nms	< V2.0	V2.0
siemens	sinec_nms	< 2.0	2.0