Description
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to download arbitrary files under a user controlled path and does not correctly check if the relative path is still within the intended target directory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SINEC NMS | All versions < V1.0 SP2 Update 1 | — |
Advisories 2
- ICSA-21-287-05 Siemens SINEC NMS CISA ICS & IT advisories · May 6, 2025
- SSA-163251 SSA-163251: Multiple Vulnerabilities in SINEC NMS Siemens ProductCERT · Oct 12, 2021