Description
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system has a Path Traversal vulnerability when exporting a firmware container. With this a privileged authenticated attacker could create arbitrary files on an affected system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SINEC NMS | All versions < V1.0 SP2 Update 1 | — |
Advisories 2
- ICSA-21-287-05 Siemens SINEC NMS CISA ICS & IT advisories · May 6, 2025
- SSA-163251 SSA-163251: Multiple Vulnerabilities in SINEC NMS Siemens ProductCERT · Oct 12, 2021