CVE-2022-24281: Siemens Sinec Network Management System

High severity, CVSS 7.2. EPSS: 3.5% chance of exploitation in the next 30 days.

A vulnerability has been identified in SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). A privileged authenticated attacker could execute arbitrary commands in the local database by sending specially crafted requests to the webserver of the affected application.

Affected products

• Siemens Sinec Network Management System: before 1.0.3 (fixed in 1.0.3)

Published 2022-03-08. Last modified 2026-06-17.