A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to delete arbitrary files or directories under a user controlled path and does not correctly check if the relative path is still within the intended target directory.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
18 Oct 2021, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:sinec_nms:1.0:-:*:*:*:*:*:* cpe:2.3:a:siemens:sinec_nms:1.0:sp2:*:*:*:*:*:* cpe:2.3:a:siemens:sinec_nms:1.0:sp1:*:*:*:*:*:* |
|
| References | (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf - Patch, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 9.1 |
12 Oct 2021, 10:52
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-10-12 10:15
Updated : 2024-02-04 22:08
NVD link : CVE-2021-33725
Mitre link : CVE-2021-33725
CVE.ORG link : CVE-2021-33725
JSON object : View
Products Affected
siemens
- sinec_nms
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')