Summary
SINEC NMS is affected by SQL injection vulnerability that could allow an authenticated low privileged attacker to exploit by inserting malicious data and achieve privilege escalation.
Siemens has released a new version for SINEC NMS and recommends to update to the latest version.
Vulnerabilities 1
-
High 8.8
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1). Affected applications are vulnerable to SQL…
Revision history
-
#1
Publication Date
References
-
SSA-318832: SQL Injection Vulnerability in SINEC NMS - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-318832.html