999 matches found
CVE-2024-33698: Heap-based Buffer Overflow
A vulnerability has been identified in Opcenter Quality All versions V2406, Opcenter RDnL All versions V2410, SIMATIC PCS neo V4.0 All versions, SIMATIC PCS neo V4.1 All versions V4.1 Update 2, SIMATIC PCS neo V5.0 All versions V5.0 Update 1, SINEC NMS All versions, SINEMA Remote Connect Client A...
PT-2024-6147
Name of the Vulnerable Software and Affected Versions SIMATIC Information Server versions 2022 and 2024 SIMATIC PCS neo versions 4.0, 4.1 through 4.1 Update 2, and 5.0 SINEC NMS versions prior to the fixed version Totally Integrated Automation Portal TIA Portal versions 16, 17 through 17 Update 8...
Siemens User Management Component (UMC)
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2024-6813 NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability
NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this...
Siemens SINEC NMS Elevation of Privilege Vulnerability (CNVD-2024-35426)
SINEC NMS is a new generation network management system for digital enterprises. An elevation of privilege vulnerability exists in Siemens SINEC NMS, which can be exploited by an attacker to execute operating system commands with elevated privileges...
Siemens SINEC NMS Authorization Error Vulnerability
SINEC NMS is a new generation network management system for digital enterprises. An authorization error vulnerability exists in Siemens SINEC NMS that stems from the application not performing authorization checks correctly and can be exploited by an authenticated attacker to bypass the checks an...
Siemens SINEC NMS Input Validation Error Vulnerability
SINEC NMS is a new generation network management system for digital enterprises. Siemens SINEC NMS suffers from an input validation error vulnerability that originates from the application not properly validating user input to a privileged command queue, which can be exploited by an authenticated...
Siemens SINEC NMS Path Traversal Vulnerability (CNVD-2024-35425)
SINEC NMS is a new generation network management system for digital enterprises. A path traversal vulnerability exists in Siemens SINEC NMS, which can be exploited by an authenticated attacker to delete arbitrary certificate files on a drive where SINEC NMS is installed...
Siemens SINEC NMS Authorization Error Vulnerability (CNVD-2024-35422)
SINEC NMS is a new generation network management system for digital enterprises. An authorization error vulnerability exists in Siemens SINEC NMS, which can be exploited by an authenticated attacker to bypass checks and make unauthorized changes to settings in the application...
CVE-2024-41941
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and modify settings in the application without authorization...
CVE-2024-41941
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and modify settings in the application without authorization...
CVE-2024-41939
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and elevate their privileges on the application...
CVE-2024-41939
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and elevate their privileges on the application...
CVE-2024-41938
A vulnerability has been identified in SINEC NMS All versions V3.0. The importCertificate function of the SINEC NMS Control web application contains a path traversal vulnerability. This could allow an authenticated attacker it to delete arbitrary certificate files on the drive SINEC NMS is...
CVE-2024-41938
A vulnerability has been identified in SINEC NMS All versions V3.0. The importCertificate function of the SINEC NMS Control web application contains a path traversal vulnerability. This could allow an authenticated attacker it to delete arbitrary certificate files on the drive SINEC NMS is...
CVE-2024-41940
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly validate user input to a privileged command queue. This could allow an authenticated attacker to execute OS commands with elevated privileges...
CVE-2024-36398
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application executes a subset of its services as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges...
CVE-2024-36398
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application executes a subset of its services as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges...
CVE-2024-41941
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and modify settings in the application without authorization...
