Siemens SINEC NMS
Advisory ansehen veröffentlicht 2021-08-10
The latest update for SINEC NMS fixes a vulnerability that could allow an authenticated remote attacker to execute arbitrary code on the system, with system privileges, under certain conditions. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-33721US | high7.2 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2). The affected application incorrectly neutralizes special elements when creating batch operations which c… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-756744: OS Command Injection Vulnerability in SINEC NMS - CSAF Versionself
- SSA-756744: OS Command Injection Vulnerability in SINEC NMS - PDF Versionself
- SSA-756744: OS Command Injection Vulnerability in SINEC NMS - TXT Versionself
- ICS Advisory ICSA-21-222-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-222-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (1)
- BehobenSINEC NMS
Update to V1.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109797645/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan