Lucene search

K
osvGoogleOSV:CVE-2022-45094
HistoryJan 10, 2023 - 12:15 p.m.

CVE-2022-45094

2023-01-1012:15:23
Google
osv.dev
7
vulnerability
sinec ins
authenticated
remote attacker
web based management
command injection
dhcp
remote code execution

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

58.8%

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1). An authenticated remote attacker with access to the Web Based Management (443/tcp) of the affected product, could potentially inject commands into the dhcpd configuration of the affected product. An attacker might leverage this to trigger remote code execution on the affected component.

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

58.8%

Related for OSV:CVE-2022-45094