Lucene search
HistoryAug 13, 2024 - 8:15 a.m.
CVE-2024-41941
vulnerability
sinec nms
authorization checks
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS
0
Percentile
14.6%
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and modify settings in the application without authorization.
Affected configurations
Node
siemenssinec_nmsRange<3.0
Related
vulnrichment
vulnrichment
CVE-2024-41941
2024-08-13 07:54:34
cve
cve
CVE-2024-41941
2024-08-13 08:15:15
cvelist
cvelist
CVE-2024-41941
2024-08-13 07:54:34
ics
ics
Siemens SINEC NMS
2024-08-15 12:00:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS
0
Percentile
14.6%
Related for NVD:CVE-2024-41941