Remote Code Execution Vulnerability in SINEC INS by Siemens

CVE-2022-45093

Summary

A vulnerability has been discovered in the SINEC INS product line by Siemens, affecting all versions prior to V1.0 SP2 Update 1. This flaw allows an authenticated remote attacker to exploit the Web Based Management interface (port 443) and the SFTP server (port 22) to read and manipulate arbitrary files on the device’s file system. If exploited, this could lead to the execution of arbitrary code on the affected system, posing a significant threat to security and operational integrity.

References