Lucene search
HistoryAug 13, 2024 - 8:15 a.m.
CVE-2024-41940
vulnerability
sinec nms
input validation
authenticated attacker
os commands
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
0.001
Percentile
18.0%
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly validate user input to a privileged command queue. This could allow an authenticated attacker to execute OS commands with elevated privileges.
Affected configurations
Node
siemenssinec_nmsRange<3.0
Related
cvelist
cvelist
CVE-2024-41940
2024-08-13 07:54:32
vulnrichment
vulnrichment
CVE-2024-41940
2024-08-13 07:54:32
cve
cve
CVE-2024-41940
2024-08-13 08:15:14
ics
ics
Siemens SINEC NMS
2024-08-15 12:00:00
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
0.001
Percentile
18.0%
Related for NVD:CVE-2024-41940