999 matches found
CVE-2024-41940
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly validate user input to a privileged command queue. This could allow an authenticated attacker to execute OS commands with elevated privileges...
CVE-2024-41940
Siemens SINEC NMS (versions prior to 3.0) contains an input validation vulnerability in the privileged command queue. An authenticated attacker could exploit improper input validation to execute OS commands with elevated privileges, effectively compromising the device. Public risk scores indicate...
CVE-2024-41940
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly validate user input to a privileged command queue. This could allow an authenticated attacker to execute OS commands with elevated privileges...
CVE-2024-41939
Siemens SINEC NMS (all versions
CVE-2024-41939
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and elevate their privileges on the application...
CVE-2024-41939
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and elevate their privileges on the application...
CVE-2024-41938
A vulnerability has been identified in SINEC NMS All versions V3.0. The importCertificate function of the SINEC NMS Control web application contains a path traversal vulnerability. This could allow an authenticated attacker it to delete arbitrary certificate files on the drive SINEC NMS is...
CVE-2024-41938
CVE-2024-41938 – SINEC NMS path traversal in importCertificate affects SINEC NMS Control web app on all versions prior to v3.0. The vulnerability is a path traversal flaw in the importCertificate function that could allow an authenticated attacker to delete arbitrary certificate files on the driv...
CVE-2024-41938
A vulnerability has been identified in SINEC NMS All versions V3.0. The importCertificate function of the SINEC NMS Control web application contains a path traversal vulnerability. This could allow an authenticated attacker it to delete arbitrary certificate files on the drive SINEC NMS is...
CVE-2024-36398
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application executes a subset of its services as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges...
CVE-2024-36398
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application executes a subset of its services as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges...
CVE-2024-36398
Siemens SINEC NMS is affected for all versions before 3.0, where the application runs a subset of services as NT AUTHORITY\SYSTEM, enabling local privilege escalation to execute OS commands with elevated rights. Public CVE entry CVE-2024-36398 is corroborated by multiple sources (NVD, Red Hat, CN...
CVE-2024-41939: Incorrect Authorization
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and elevate their privileges on the application...
CVE-2024-41941: Incorrect Authorization
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and modify settings in the application without authorization...
CVE-2024-36398: Execution with Unnecessary Privileges
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application executes a subset of its services as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges...
Siemens SINEC NMS
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
PT-2024-8112
Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V3.0 Description: The issue is related to insufficient validation of user input, which could allow an authenticated attacker to execute OS commands with elevated privileges. This is due to the affected application...
CVE-2024-41940: Improper Input Validation
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly validate user input to a privileged command queue. This could allow an authenticated attacker to execute OS commands with elevated privileges...
CVE-2024-41938: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been identified in SINEC NMS All versions V3.0. The importCertificate function of the SINEC NMS Control web application contains a path traversal vulnerability. This could allow an authenticated attacker it to delete arbitrary certificate files on the drive SINEC NMS is...
