SINEMA Server V14 vulnerabilities

4 known vulnerabilities in SINEMA Server V14 from Siemens. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  SINEMA Server V14: Improper Neutralization of Input During Web Page Generation

  CVE-2023-35796Oct 10, 2023Siemens

  A vulnerability has been identified in SINEMA Server V14 (All versions). The affected application improperly sanitizes certain SNMP configuration data retrieved from monitored devices. An attacker with access to a monitored device could perform a stored cross-

• 8.8 High severity

  SINEC NMS: Improper Privilege Management

  CVE-2022-25311Mar 8, 2022Siemens

  A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). The affected software do not properly check privileges between users during the same web browser session, cre

• 7.2 High severity

  SINEC NMS: Deserialization of Untrusted Data

  CVE-2022-24282Mar 8, 2022SiemensEPSS 1.43%

  A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). The affected system allows to upload JSON objects that are deserialized to Java objects. Due to insecure dese

• 7.2 High severity

  SINEC NMS: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-24281Mar 8, 2022SiemensEPSS 3.49%

  A vulnerability has been identified in SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). A privileged authenticated attacker could execute arbitrary commands in the local database by sending specially crafted requests to the webserver of the