NewsSiemens ProductCERT

    SSA-250085 V1.2 (Last Update: 2023-03-14): Multiple Vulnerabilities in SINEC NMS and SINEMA Server

    SINEC NMS and SINEMA Server V14 contains multiple vulnerabilities that could allow an attacker to execute arbitrary code on the system, arbitrary commands on the local database or achieve privilege escalation. Siemens has released an update for SINEC NMS to fix CVE-2022-24281 and recommends to update to the latest version. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.

    Linked advisories

    Affected vendors and products

    More on SSA-250085

    Other advisories

    Other news entries

    Source: https://cert-portal.siemens.com/productcert/html/ssa-250085.html

    ID