CVE-2021-33725

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to delete arbitrary files or directories under a user controlled path and does not correctly check if the relative path is still within the intended target directory.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:sinec_nms:1.0:-:*:*:*:*:*:*
cpe:2.3:a:siemens:sinec_nms:1.0:sp1:*:*:*:*:*:*
cpe:2.3:a:siemens:sinec_nms:1.0:sp2:*:*:*:*:*:*

History

No history.

Information

Published : 2021-10-12 10:15

Updated : 2024-02-28 18:48


NVD link : CVE-2021-33725

Mitre link : CVE-2021-33725

CVE.ORG link : CVE-2021-33725


JSON object : View

Products Affected

siemens

  • sinec_nms
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')