High SSA-160243 2 CVEs

SSA-160243: Multiple Vulnerabilities in SINEC NMS before V2.0

Published Oct 10, 2023 · Updated Jul 9, 2024 · Revision 2

Vendor: Siemens Product: SINEC NMS

Summary

SINEC NMS before V2.0 is affected by a code injection and a stored cross-site scripting vulnerability.

Siemens has released an update for SINEC NMS and recommends to update to the latest version.

Vulnerabilities 2

High 7.8

CVE-2022-30527

A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application assigns improper acces…

Siemens SINEC NMS ICS / OT

Oct 10, 2023
Medium 4.7

CVE-2023-44315

A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application improperly sanitizes c…

Siemens SINEC NMS ICS / OT

Oct 10, 2023

Revision history

2024-07-09 #2
Added acknowledgement for CVE-2022-30527
2023-10-10 #1
Publication Date

References

SSA-160243: Multiple Vulnerabilities in SINEC NMS before V2.0 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-160243.html
SSA-160243: Multiple Vulnerabilities in SINEC NMS before V2.0 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-160243.pdf
SSA-160243: Multiple Vulnerabilities in SINEC NMS before V2.0 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-160243.txt