CVE-2021-33723

2021-10-1209:49:24

CWE-285

siemens

www.cve.org

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could change the user profile of any user without proper authorization. With this, the attacker could change the password of any user in the affected system.

CNA Affected

[
  {
    "product": "SINEC NMS",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.0 SP2 Update 1"
      }
    ]
  }
]