Description
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). An attacker with access to the webserver of an affected system could download arbitrary files from the underlying filesystem by sending a specially crafted HTTP request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SINEC NMS | All versions < V1.0 SP1 | — |
Advisories 2
- ICSA-21-257-14 Siemens SINEC NMS CISA ICS & IT advisories · May 6, 2025
- SSA-330339 SSA-330339: Web Vulnerabilities in SINEC NMS Siemens ProductCERT · Sep 14, 2021