SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2
view advisory published 2024-04-09
SINEC NMS before V2.0 SP2 is affected by multiple vulnerabilities. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-31978US | — | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is… | ||||
| CVE-2023-5678US | medium5.3 | — | ||
Issue summary: Generating excessively long X9.42 DH keys or checking
excessively long X9.42 DH keys or parameters may be very slow.
Impact summary: Applications that use the funct… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2 - CSAF Versionself
- SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2 - HTML Versionself
- SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2 - PDF Versionself
- SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2 - TXT Versionself
03
remediations (2)
- FixedSINEC NMS
Update to V2.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954920/ - FixedSINEC NMS
Update to V2.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954920/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan