Siemens SINEC NMS
The latest update for SINEC NMS fixes multiple vulnerabilities. The most severe could allow an authenticated remote attacker to execute arbitrary code on the system, with system privileges, under certain conditions. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
describes (15)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-33736US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by s… | ||||
| CVE-2021-33735US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by s… | ||||
| CVE-2021-33734US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by s… | ||||
| CVE-2021-33733US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by s… | ||||
| CVE-2021-33732US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by s… | ||||
| CVE-2021-33731US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by s… | ||||
| CVE-2021-33730US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by s… | ||||
| CVE-2021-33729US | high8.8 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker that is able to import firmware containers to an affected system coul… | ||||
| CVE-2021-33728US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to upload JSON objects that are deserialized to JAVA objects. Due to… | ||||
| CVE-2021-33727US | medium6.5 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could download the user profile of any user. With this, the attacker… | ||||
| CVE-2021-33726US | high7.5 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to download arbitrary files under a user controlled path and does no… | ||||
| CVE-2021-33725US | critical9.1 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to delete arbitrary files or directories under a user controlled pat… | ||||
| CVE-2021-33724US | critical9.1 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to d… | ||||
| CVE-2021-33723US | medium6.5 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could change the user profile of any user without proper authorizatio… | ||||
| CVE-2021-33722US | medium4.9 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system has a Path Traversal vulnerability when exporting a firmware container. Wit… | ||||
references
External citations — patches, advisories, analysis.
- SSA-163251: Multiple Vulnerabilities in SINEC NMS - CSAF Versionself
- SSA-163251: Multiple Vulnerabilities in SINEC NMS - PDF Versionself
- SSA-163251: Multiple Vulnerabilities in SINEC NMS - TXT Versionself
- ICS Advisory ICSA-21-287-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-287-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (30)
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- FixedSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - FixedSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - FixedSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - FixedSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - FixedSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - FixedSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - FixedSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - FixedSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - FixedSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - FixedSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - FixedSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - FixedSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - FixedSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - FixedSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - FixedSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan