Skip to content
OpenAdvisories
High SSA-128433 2 CVEs

SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2

Published Apr 9, 2024 · Updated Apr 9, 2024

Vendor: Siemens Product: SINEC NMS

Summary

SINEC NMS before V2.0 SP2 is affected by multiple vulnerabilities.

Siemens has released an update for SINEC NMS and recommends to update to the latest version.

Vulnerabilities 2

  • High 7.6
    CVE-2024-31978

    A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users …

    Siemens SINEC NMS ICS / OT
  • Medium 5.3
    CVE-2023-5678

    Excessive time spent in DH check / generation with large Q parameter value

    Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. L…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Revision history

  1. #1

    Publication Date

References