Over a Dozen Flaws Found in Siemens' Industrial Network Management System

Cybersecurity researchers have disclosed details about 15 security flaws in Siemens SINEC network management system NMS, some of which could be chained by an attacker to achieve remote code execution on affected systems. "The vulnerabilities, if exploited, pose a number of risks to Siemens device...

Siemens SINEC NMS Directory Traversal (CVE-2021-33722)

A directory traversal vulnerability exists in Siemens SINEC NMS. The vulnerability is due to improper validation of user-supplied path while exporting firmware containers...

CVE-2021-33722

creationtimestamp| type| source ---|---|--- 2021-10-12 14:25:32+00:00| seen| https://t.me/cibsecurity/30384 2022-06-20 08:48:23+00:00| seen| https://t.me/itsecnews/858 2022-06-20 16:22:09+00:00| seen| https://t.me/truesecator/3077 2022-07-01 07:01:26+00:00| seen| https://t.me/poxek/1876...

CVE-2021-33722

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system has a Path Traversal vulnerability when exporting a firmware container. With this a privileged authenticated attacker could create arbitrary files on an affected system...

CVE-2021-33722

Siemens SINEC NMS (versions prior to 1.0 SP2 Update 1) is affected by a path traversal vulnerability when exporting a firmware container. The issue could allow a privileged, authenticated attacker to create arbitrary files on the device. Affected component is the firmware container export path; r...