Vulnerabilities (CVE)

Filtered by vendor Siemens Subscribe
Filtered by product Sinec Nms
Total 42 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-41939 1 Siemens 1 Sinec Nms 2024-08-14 N/A 8.8 HIGH
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and elevate their privileges on the application.
CVE-2024-41938 1 Siemens 1 Sinec Nms 2024-08-14 N/A 3.8 LOW
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The importCertificate function of the SINEC NMS Control web application contains a path traversal vulnerability. This could allow an authenticated attacker it to delete arbitrary certificate files on the drive SINEC NMS is installed on.