cvedb.io
CVE-2022-45094
HIGH · CVSS 8.4
EPSS exploitation probability: 0%
Published 2023-01-10T12:15:23.590 · Last modified 2026-06-17T05:09:20.863

Summary

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1). An authenticated remote attacker with access to the Web Based Management (443/tcp) of the affected product, could potentially inject commands into the dhcpd configuration of the affected product. An attacker might leverage this to trigger remote code execution on the affected component.

Affected products

siemens — sinec_ins

Does this affect you?

Add your gear to cvedb and we'll alert you only when siemens ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.