CRITICAL🇬🇧 English

CVE-2021-33725

CVSS 9.1v3.1pub. 2021-10-12upd. 2024-11-21

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to delete arbitrary files or directories under a user controlled path and does not correctly check if the relative path is still within the intended target directory.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

  • Siemens Sinec Nms

    APP
    Siemens
    1.0< 1.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Path Traversal
CWE
Referencje

Powiązane podatności

CVE-2021-40438CRITICAL9.0⚠ KEVten sam produkt

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remot...

CVE-2025-40736CRITICAL9.3PL ✓ten sam produkt

Siemens SINEC NMS — Auth Bypass umożliwiający reset hasła superadmina

CVE-2024-41940CRITICAL9.4PL ✓ten sam produkt

Siemens SINEC NMS — wykonanie poleceń OS z podwyższonymi uprawnieniami

CVE-2021-33724CRITICAL9.1ten sam produkt

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system conta...

CVE-2021-39275CRITICAL9.8ten sam produkt

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass u...