Lucene search

China National Vulnerability DatabaseCNVD-2024-09309

HistoryFeb 21, 2024 - 12:00 a.m.

Siemens SINEC NMS SQL Injection Vulnerability (CNVD-2024-09309)

2024-02-2100:00:00

China National Vulnerability Database

www.cnvd.org.cn

siemens

sinec nms

sql injection

vulnerability

digital enterprises

network management system

arbitrary sql queries

server database

exploited

cnvd-2024-09309

8.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.5%

JSON

SINEC NMS is a new generation network management system (NMS) for digital enterprises. Siemens SINEC NMS suffers from a SQL injection vulnerability that can be exploited by an attacker to execute arbitrary SQL queries on the server database.