CVE-2022-24281

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). A privileged authenticated attacker could execute arbitrary commands in the local database by sending specially crafted requests to the webserver of the affected application.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
SiemensSINEC NMSAll versions < V1.0.3
SiemensSINEMA Server V14All versions

References

Timeline

Published
Mar 8, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-242827.2A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All CVE-2022-242857.8Acer Care Center 4.00.30xx before 4.00.3042 contains a local privilege escalation vulnerability. The user process communicates with a servicCVE-2022-242867.8Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local privilege escalation vulnerability. The user proCVE-2022-242877.8A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 VCVE-2022-242888.8In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS CCVE-2022-242898.8Hessian serialization is a network protocol that supports object-based transmission. Apache Cayenne's optional Remote Object Persistence (ROCVE-2022-24298.0The Ultimate SMS Notifications for WooCommerce plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.1 vCVE-2022-242907.5A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), TeamcenterCVE-2022-242917.5Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.CVE-2022-242929.8Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.CVE-2022-242939.8Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.CVE-2022-242947.5A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resource consumption. The