CVE-2021-33730

CVE-2021-33730 affects Siemens SINEC NMS prior to v1.0 SP2 Update 1. The issue allows a privileged authenticated attacker to execute arbitrary commands in the local database by sending crafted requests to the web server of the affected application. The Red Hat, NVD, and Siemens/ISAS Nessus/CSAs e...

CVE-2021-33730

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

CVE-2021-33729

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. An authenticated attacker that is able to import firmware containers to an affected system could execute arbitrary commands in the local database...

CVE-2021-33729

CVE-2021-33729 affects Siemens SINEC NMS, all versions prior to 1.0 SP2 Update 1. It is described as an SQL Injection vulnerability that, when exploited by an authenticated attacker, could allow execution of arbitrary commands in the local database. The connected sources consistently identify thi...

CVE-2021-33728

Summary of advisory for CVE-2021-33728 (Siemens SINEC NMS) Affected product: Siemens SINEC NMS (all versions

CVE-2021-33728

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system allows to upload JSON objects that are deserialized to JAVA objects. Due to insecure deserialization of user-supplied content by the affected software, a privileged attacker could exploit this...

CVE-2021-33726

CVE-2021-33726 — SINEC NMS path traversal vulnerability in Siemens SINEC NMS prior to version 1.0 SP2 Update 1. The flaw allows downloading arbitrary files under a user-controlled path by failing to ensure the relative path stays within the target directory. Affects all versions

CVE-2021-33727

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. An authenticated attacker could download the user profile of any user. With this, the attacker could leak confidential information of any user in the affected system...

CVE-2021-33726

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system allows to download arbitrary files under a user controlled path and does not correctly check if the relative path is still within the intended target directory...

CVE-2021-33727

Summary: CVE-2021-33727 affects Siemens SINEC NMS prior to v1.0 SP2 Update 1. An authenticated attacker can download any user’s profile, enabling disclosure of confidential information. This is categorized as an information disclosure vulnerability (Exposure of Sensitive Information to an Unautho...

CVE-2021-33725

CVE-2021-33725 affects Siemens SINEC NMS (versions prior to 1.0 SP2 Update 1). The vulnerability is a path traversal issue where the system allows deleting arbitrary files/directories under a user-controlled path and does not reliably ensure the relative path stays within the intended target dire...

CVE-2021-33725

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system allows to delete arbitrary files or directories under a user controlled path and does not correctly check if the relative path is still within the intended target directory...

CVE-2021-33724

Siemens SINEC NMS is affected by CVE-2021-33724 (all versions prior to 1.0 SP2 Update 1) due to an Arbitrary File Deletion vulnerability that could permit deletion of arbitrary files or directories under a user-controlled path. The vulnerability is documented across multiple sources (NVD, Red Hat...

CVE-2021-33724

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary file or directory under a user controlled path...

CVE-2021-33723

Siemens SINEC NMS before version 1.0 SP2 Update 1 contains a vulnerability (CVE-2021-33723) that allows an authenticated attacker to change the user profile of any user, including passwords, due to improper authorization. This affects all versions prior to 1.0 SP2 Update 1. The issue is documente...

CVE-2021-33723

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. An authenticated attacker could change the user profile of any user without proper authorization. With this, the attacker could change the password of any user in the affected system...

CVE-2021-33722

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system has a Path Traversal vulnerability when exporting a firmware container. With this a privileged authenticated attacker could create arbitrary files on an affected system...

CVE-2021-33722

Siemens SINEC NMS (versions prior to 1.0 SP2 Update 1) is affected by a path traversal vulnerability when exporting a firmware container. The issue could allow a privileged, authenticated attacker to create arbitrary files on the device. Affected component is the firmware container export path; r...

CVE-2021-33726: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system allows to download arbitrary files under a user controlled path and does not correctly check if the relative path is still within the intended target directory...

CVE-2021-33727: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. An authenticated attacker could download the user profile of any user. With this, the attacker could leak confidential information of any user in the affected system...