Siemens SINEC NMS SQL Injection Vulnerability (CNVD-2022-17792)

Siemens SINEC NMS is a network management system (NMS) from Siemens Germany that is used to centrally monitor, manage, and configure industrial networks with tens of thousands of devices 24/7, including security-related areas.A SQL injection vulnerability in Siemens SINEC NMS allows a privileged, authenticated attacker to Exploit the vulnerability to execute arbitrary commands in the local database by sending a carefully crafted request to the affected application’s Web server.