CVE-2022-30527
No fix known EPSS <1%CVSS 7.8
A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application assigns improper access rights to specific folders containing executable files and libraries. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
Products: Siemens SINEC NMS