CVE-2022-25311: Siemens Sinec Network Management System

High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). The affected software do not properly check privileges between users during the same web browser session, creating an unintended sphere of control. This could allow an authenticated low privileged user to achieve privilege escalation.

Affected products

• Siemens Sinec Network Management System: before 1.0.3 (fixed in 1.0.3)
• Siemens Sinema Server: version 14.0 only

Published 2022-03-08. Last modified 2026-06-17.