PT-2024-20097 · Siemens · Sinec Nms
CVE-2024-23812
·
Published
2024-02-13
·
Updated
2024-10-04
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SINEC NMS versions prior to V2.0 SP1
Description
A vulnerability has been identified in the affected application where it incorrectly neutralizes special elements when creating a report, which could lead to command injection.
Recommendations
For versions prior to V2.0 SP1, update to V2.0 SP1 or later to resolve the issue. As a temporary workaround, consider restricting the creation of reports to minimize the risk of exploitation.
Fix
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sinec Nms