Siemens SINEC NMS Path Traversal Vulnerability (CNVD-2021-77583)

SINEC NMS is a network management system from Siemens for monitoring and managing industrial networks.A path traversal vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1. The vulnerability stems from the fact that the affected system allows arbitrary files to be downloaded under a user-controlled path and does not properly check if the relative path is still in the destination directory. No detailed vulnerability details are currently available.