Skip to content
OpenAdvisories
High · 8.0 CVE-2024-23812 EUVD-2024-21265GHSA-mpc7-49rp-mqqc

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application incorrectly neutralizes special elemen…

Published Feb 13, 2024 · Updated Aug 16, 2024 · Assigned by siemens

Description

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application incorrectly neutralizes special elements when creating a report which could lead to command injection.

Affected products

VendorProductAffectedFixed
Siemens SINEC NMS < V2.0 SP1 V2.0 SP1

Advisories 2

References