CVE-2021-33736

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:sinec_nms:1.0:-:*:*:*:*:*:*
cpe:2.3:a:siemens:sinec_nms:1.0:sp1:*:*:*:*:*:*
cpe:2.3:a:siemens:sinec_nms:1.0:sp2:*:*:*:*:*:*

History

No history.

Information

Published : 2021-10-12 10:15

Updated : 2024-02-28 18:48


NVD link : CVE-2021-33736

Mitre link : CVE-2021-33736

CVE.ORG link : CVE-2021-33736


JSON object : View

Products Affected

siemens

  • sinec_nms
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')