Siemens SINEC NMS FirmwareFileUtils extractToFolder Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens SINEC NMS. Authentication is required to exploit this vulnerability. The specific flaw exists within the FirmwareFileUtils class. The issue results from the lack of proper validation of a...

PT-2021-11117

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V1.0 SP1 Update 1 SINEMA Server versions prior to V14.0 SP2 Update 2 Description: A vulnerability has been identified that allows an attacker to create or overwrite arbitrary files on an affected system. This occur...