[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPh442oP7kCzW5CSZWGWoKdForeQBDxJbo8Ed5UFFrzw":3,"g5a-risk:CVE-2022-25311":122},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":49,"epssPercentile":26,"epssTimeSeries":50,"severity":51,"affectedProducts":52,"affectedProductsCount":62,"references":63,"referencesCount":70,"weaknesses":71,"weaknessesCount":70,"isActivelyExploited":80,"cisaInfo":26,"otxData":26,"relatedBlogPosts":81,"seoMetadata":82,"configurations":107,"relatedVendorCves":118,"notableEvents":119},"CVE-2022-25311","What is CVE-2022-25311?","A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 \u003C V2.0), SINEC NMS (All versions \u003C V1.0.3), SINEMA Server V14 (All versions). The affected software do not properly check privileges between users during the same web browser session, creating an unintended sphere of control. This could allow an authenticated low privileged user to achieve privilege escalation.","A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 \u003C V2.0), SINEC NMS (All versions \u003C V1.0.3), SINEMA Server V14 (All versions). The af...","2022-03-08T12:15:11.727","2023-10-10T11:15:10.477",7.3,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":38,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"productcert@siemens.com","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","REQUIRED","UNCHANGED","HIGH",null,1.3,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":37,"ImpactScore":28},"nvd@nist.gov","Secondary",{"Version":20,"VectorString":33,"AttackVector":34,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":35,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":36,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NETWORK","NONE",8.8,2.8,[39],{"Source":30,"Type":18,"CVSSData":40,"BaseSeverity":46,"ExploitabilityScore":47,"ImpactScore":48,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":41,"VectorString":42,"AccessVector":34,"AccessComplexity":22,"Authentication":43,"ConfidentialityImpact":44,"IntegrityImpact":44,"AvailabilityImpact":44,"BaseScore":45,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.00537,[49,49,49,49,49,49,49],"High",[53,58],{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"siemens","sinec_network_management_system","*","cpe:2.3:a:siemens:sinec_network_management_system:*:*:*:*:*:*:*:*",{"vendor":54,"product":59,"version":60,"criteria":61,"vulnerable":4},"sinema_server","14.0","cpe:2.3:a:siemens:sinema_server:14.0:*:*:*:*:*:*:*",2,[64],{"url":65,"source":66,"tags":67},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-250085.pdf","Siemens",[68,69],"Mitigation","Vendor Advisory",1,[72],{"id":73,"name":74,"description":75,"extendedDescription":76,"status":77,"abstraction":78,"structure":79},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",false,[],{"title":83,"metaDescription":84,"keywords":85,"canonicalUrl":86,"structuredData":87},"What is CVE-2022-25311? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-25311, a high severity cyber security vulnerability from 2022. A vulnerability has been identified in SINEC NMS (All versi...","CVE-2022-25311, CVE-2022-25311 vulnerability, CVE-2022-25311 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, siemens security, sinec_network_management_system vulnerability, sinema_server vulnerability","\u002Fwhat-is\u002Fcve-2022-25311",{"@context":88,"@type":89,"headline":83,"description":84,"datePublished":10,"dateModified":11,"author":90,"publisher":94,"about":98,"mainEntityOfPage":102,"articleSection":105,"keywords":106},"https:\u002F\u002Fschema.org","TechArticle",{"@type":91,"name":92,"url":93},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":91,"name":92,"url":93,"logo":95},{"@type":96,"url":97},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":99,"name":6,"description":100,"additionalType":101},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":103,"@id":104},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-25311","Cybersecurity","CVE-2022-25311, CVE-2022-25311 vulnerability, CVE-2022-25311 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[108],{"Operator":26,"Negate":26,"Nodes":109},[110],{"Operator":111,"Negate":26,"CPEMatch":112},"OR",[113,116],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":114,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":115,"VersionEndIncluding":26},"0D14E8FC-464B-414D-AE56-C20FF46E25FB","1.0.3",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"85D4624C-8FF6-43E7-9098-5BD106EF6972",[],[],{"lastModified":11,"cacheTime":121,"version":41},1792364718168,{"score":123,"band":124,"action":125,"scoredAt":126},47,"Medium","Plan remediation","2026-10-16T06:53:44.387947+00:00"]