Lucene search
HistoryAug 13, 2024 - 8:15 a.m.
CVE-2024-41939
sinec nms
authorization checks
privilege elevation
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
18.9%
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and elevate their privileges on the application.
Affected configurations
Node
siemenssinec_nmsRange<3.0
Related
cvelist
cvelist
CVE-2024-41939
2024-08-13 07:54:31
vulnrichment
vulnrichment
CVE-2024-41939
2024-08-13 07:54:31
cve
cve
CVE-2024-41939
2024-08-13 08:15:14
ics
ics
Siemens SINEC NMS
2024-08-15 12:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
18.9%
Related for NVD:CVE-2024-41939