CVE-2021-33729

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V1.0 SP2 Update 1

Description: A vulnerability has been identified that allows an authenticated attacker to execute arbitrary commands in the local database by importing firmware containers to an affected system.

Recommendations: For versions prior to V1.0 SP2 Update 1, update to V1.0 SP2 Update 1 or later to resolve the issue. As a temporary workaround, consider restricting access to firmware container imports to minimize the risk of exploitation.