CVE-2022-45092

CVE-2022-45092 is a critical path traversal vulnerability affecting all versions of Siemens SINEC INS prior to V1.0 SP2 Update 1. An authenticated remote attacker can exploit this flaw via the web-based management interface (443/tcp) to read and write arbitrary files on the device's file system. This high-severity vulnerability, rated 8.8 CVSS, could lead to remote code execution, allowing an attacker full control over the affected component. While there is no known public exploit code or active exploitation, the vulnerability has garnered some community discussion, indicating awareness within the cybersecurity community.