Siemens SINEC NMS
view advisory published 2021-08-10
The latest update for SINEC NMS fixes a vulnerability that could allow an authenticated remote attacker to execute arbitrary code on the system, with system privileges, under certain conditions. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-33721US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2). The affected application incorrectly neutralizes special elements when creating batch operations which c… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-756744: OS Command Injection Vulnerability in SINEC NMS - CSAF Versionself
- SSA-756744: OS Command Injection Vulnerability in SINEC NMS - PDF Versionself
- SSA-756744: OS Command Injection Vulnerability in SINEC NMS - TXT Versionself
- ICS Advisory ICSA-21-222-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-222-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- FixedSINEC NMS
Update to V1.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109797645/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan