Siemens SINEC NMS Arbitrary File Upload Vulnerability

2024-02-2100:00:00

China National Vulnerability Database

www.cnvd.org.cn

siemens

sinec nms

file upload

vulnerability

network management system

digital enterprises

remote code execution

cnvd

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.5%

JSON

SINEC NMS is a new generation network management system (NMS) for digital enterprises. An arbitrary file upload vulnerability exists in Siemens SINEC NMS, which can be exploited by an attacker to upload a malicious firmware image or other file that could lead to remote code execution.