CVE-2021-33734

CVE-2021-33734 is a SQL‑injection/command‑execution vulnerability in Siemens SINEC NMS Server (all versions < 1.0 SP2 Update 1). A privileged authenticated attacker could send crafted requests to the web server to execute arbitrary commands in the local database. The issue is part of a broader...

CVE-2021-33735

CVE-2021-33735 affects Siemens SINEC NMS (all versions

CVE-2021-33733

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

CVE-2021-33733

CVE-2021-33733 affects Siemens SINEC NMS (versions prior to 1.0 SP2 Update 1). The vulnerability is an SQL injection in the web server that, when combined with authenticated access, could allow an attacker to execute arbitrary commands in the local database by sending crafted requests. Impact is ...

CVE-2021-33732

Siemens SINEC NMS is affected by CVE-2021-33732 (SQL Injection) in all versions prior to 1.0 SP2 Update 1. A privileged, authenticated attacker could send crafted requests to the web server and execute arbitrary commands in the local database. Remediation: update to v1.0 SP2 Update 1 or later. Th...

CVE-2021-33732

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

CVE-2021-33731

CVE-2021-33731 affects Siemens SINEC NMS versions prior to 1.0 SP2 Update 1. It is a SQL injection vulnerability in the web server that could allow a privileged, authenticated attacker to execute arbitrary commands in the local database by sending crafted requests. Glimpse of impact from sources:...

CVE-2021-33731

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

CVE-2021-33730

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

CVE-2021-33730

CVE-2021-33730 affects Siemens SINEC NMS prior to v1.0 SP2 Update 1. The issue allows a privileged authenticated attacker to execute arbitrary commands in the local database by sending crafted requests to the web server of the affected application. The Red Hat, NVD, and Siemens/ISAS Nessus/CSAs e...

CVE-2021-33729

CVE-2021-33729 affects Siemens SINEC NMS, all versions prior to 1.0 SP2 Update 1. It is described as an SQL Injection vulnerability that, when exploited by an authenticated attacker, could allow execution of arbitrary commands in the local database. The connected sources consistently identify thi...

CVE-2021-33729

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. An authenticated attacker that is able to import firmware containers to an affected system could execute arbitrary commands in the local database...

CVE-2021-33728

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system allows to upload JSON objects that are deserialized to JAVA objects. Due to insecure deserialization of user-supplied content by the affected software, a privileged attacker could exploit this...

CVE-2021-33728

Summary of advisory for CVE-2021-33728 (Siemens SINEC NMS) Affected product: Siemens SINEC NMS (all versions

CVE-2021-33726

CVE-2021-33726 — SINEC NMS path traversal vulnerability in Siemens SINEC NMS prior to version 1.0 SP2 Update 1. The flaw allows downloading arbitrary files under a user-controlled path by failing to ensure the relative path stays within the target directory. Affects all versions

CVE-2021-33727

Summary: CVE-2021-33727 affects Siemens SINEC NMS prior to v1.0 SP2 Update 1. An authenticated attacker can download any user’s profile, enabling disclosure of confidential information. This is categorized as an information disclosure vulnerability (Exposure of Sensitive Information to an Unautho...

CVE-2021-33726

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system allows to download arbitrary files under a user controlled path and does not correctly check if the relative path is still within the intended target directory...

CVE-2021-33727

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. An authenticated attacker could download the user profile of any user. With this, the attacker could leak confidential information of any user in the affected system...

CVE-2021-33725

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system allows to delete arbitrary files or directories under a user controlled path and does not correctly check if the relative path is still within the intended target directory...

CVE-2021-33725

CVE-2021-33725 affects Siemens SINEC NMS (versions prior to 1.0 SP2 Update 1). The vulnerability is a path traversal issue where the system allows deleting arbitrary files/directories under a user-controlled path and does not reliably ensure the relative path stays within the intended target dire...