999 matches found
Command injection
A vulnerability has been identified in SINEC NMS All versions V2.0 SP1. The affected application incorrectly neutralizes special elements when creating a report which could lead to command injection...
Remote code execution
A vulnerability has been identified in SINEC NMS All versions V2.0 SP1. The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution...
Sql injection
A vulnerability has been identified in SINEC NMS All versions V2.0 SP1. The affected application is vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database...
CVE-2024-23812
CVE-2024-23812 affects Siemens SINEC NMS: all versions prior to 2.0 SP1 are vulnerable to OS command injection caused by incorrect neutralization of special elements when generating reports. The issue can lead to arbitrary command execution and has high impact on confidentiality, integrity, and a...
CVE-2024-23812
A vulnerability has been identified in SINEC NMS All versions V2.0 SP1. The affected application incorrectly neutralizes special elements when creating a report which could lead to command injection...
CVE-2024-23812
A vulnerability has been identified in SINEC NMS All versions V2.0 SP1. The affected application incorrectly neutralizes special elements when creating a report which could lead to command injection...
CVE-2024-23811
A vulnerability has been identified in SINEC NMS All versions V2.0 SP1. The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution...
CVE-2024-23811
CVE-2024-23811 affects Siemens SINEC NMS (all versions
CVE-2024-23811
A vulnerability has been identified in SINEC NMS All versions V2.0 SP1. The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution...
CVE-2024-23810
A vulnerability has been identified in SINEC NMS All versions V2.0 SP1. The affected application is vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database...
CVE-2024-23810
Siemens SINEC NMS is affected by CVE-2024-23810: all versions prior to 2.0 SP1 are vulnerable to SQL injection in the server database, potentially allowing an unauthenticated attacker to run arbitrary SQL queries. Sources consistently identify this CVE as a SQL-injection issue impacting SINEC NMS...
CVE-2024-23810
A vulnerability has been identified in SINEC NMS All versions V2.0 SP1. The affected application is vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database...
PT-2024-20097 · Siemens · Sinec Nms
Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V2.0 SP1 Description: A vulnerability has been identified in the affected application where it incorrectly neutralizes special elements when creating a report, which could lead to command injection. Recommendations...
CVE-2024-23811: Unrestricted Upload of File with Dangerous Type
A vulnerability has been identified in SINEC NMS All versions V2.0 SP1. The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution...
Siemens SINEC NMS
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
Siemens SINEC NMS 代码问题漏洞
SINEC NMS is a new generation network management system NMS for digital enterprises. An arbitrary file upload vulnerability exists in Siemens SINEC NMS, which can be exploited by an attacker to upload a malicious firmware image or other file that could lead to remote code execution...
PT-2024-20096 · Siemens · Sinec Nms
Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V2.0 SP1 Description: A vulnerability has been identified in the affected application, allowing users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other...
CVE-2024-23810: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in SINEC NMS All versions V2.0 SP1. The affected application is vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database...
CVE-2024-23812: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been identified in SINEC NMS All versions V2.0 SP1. The affected application incorrectly neutralizes special elements when creating a report which could lead to command injection...
