High severity · published Oct 10, 2023
CVE-2022-30527
A vulnerability has been identified in SINEC NMS (All versions < V2.0)
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application assigns improper access rights to specific folders containing executable files and libraries.
This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SN
Sinec Nms · Siemens
before 2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-30527
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-30527
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-160243.html
Patch
https://cert-portal.siemens.com/productcert/pdf/ssa-160243.pdf
More from Sinec Nms
9.0
CVE-2021-40438
mod_proxy SSRF
7.5
CVE-2023-44487
HTTP/2 Rapid Reset Attack Vulnerability
9.8
CVE-2025-40736
A vulnerability has been identified in SINEC NMS (All versions < V4.0)
9.8
CVE-2024-33698
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1…
9.8
CVE-2024-23810
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1)