Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-41938

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The importCertificate function of the SINEC NMS Control web application contains a path traversal vulnerability. This could allow an authenticated attacker it to delete arbitrary certificate files on the drive SINEC NMS is installed on.

Published

2024-08-13T08:15:14.353

Last Modified

2024-08-14T18:08:42.777

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-22
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application siemens sinec_nms < 3.0 Yes
References