Siemens SINEC NMS
The latest update for SINEC NMS fixes multiple vulnerabilities. The most severe could allow an authenticated remote attacker to execute arbitrary code on the system, with system privileges, under certain conditions. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
beschreibt (15)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-33736US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by s… | ||||
| CVE-2021-33735US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by s… | ||||
| CVE-2021-33734US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by s… | ||||
| CVE-2021-33733US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by s… | ||||
| CVE-2021-33732US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by s… | ||||
| CVE-2021-33731US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by s… | ||||
| CVE-2021-33730US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by s… | ||||
| CVE-2021-33729US | high8.8 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker that is able to import firmware containers to an affected system coul… | ||||
| CVE-2021-33728US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to upload JSON objects that are deserialized to JAVA objects. Due to… | ||||
| CVE-2021-33727US | medium6.5 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could download the user profile of any user. With this, the attacker… | ||||
| CVE-2021-33726US | high7.5 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to download arbitrary files under a user controlled path and does no… | ||||
| CVE-2021-33725US | critical9.1 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to delete arbitrary files or directories under a user controlled pat… | ||||
| CVE-2021-33724US | critical9.1 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to d… | ||||
| CVE-2021-33723US | medium6.5 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could change the user profile of any user without proper authorizatio… | ||||
| CVE-2021-33722US | medium4.9 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system has a Path Traversal vulnerability when exporting a firmware container. Wit… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-163251: Multiple Vulnerabilities in SINEC NMS - CSAF Versionself
- SSA-163251: Multiple Vulnerabilities in SINEC NMS - PDF Versionself
- SSA-163251: Multiple Vulnerabilities in SINEC NMS - TXT Versionself
- ICS Advisory ICSA-21-287-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-287-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (30)
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- MitigationSINEC NMS
Restrict access to the affected systems, especially to port 443/tcp, to trusted IP addresses only
- BehobenSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - BehobenSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - BehobenSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - BehobenSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - BehobenSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - BehobenSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - BehobenSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - BehobenSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - BehobenSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - BehobenSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - BehobenSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - BehobenSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - BehobenSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - BehobenSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/ - BehobenSINEC NMS
Update to V1.0 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109802731/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan