Summary
The latest update for SINEC NMS fixes a vulnerability that could allow an authenticated remote attacker to execute arbitrary code on the system, with system privileges, under certain conditions.
Siemens has released an update for SINEC NMS and recommends to update to the latest version.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2). The affected application incorrectly neutra…
Revision history
-
#2
Updated acknowledgements
-
#1
Publication Date
References
-
SSA-756744: OS Command Injection Vulnerability in SINEC NMS - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-756744.pdf
-
SSA-756744: OS Command Injection Vulnerability in SINEC NMS - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-756744.txt