CVE-2024-23811

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://cert-portal.siemens.com/productcert/html/ssa-943925.html	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:siemens:sinec_nms::::::::
	cpe:2.3:a:siemens:sinec_nms:2.0:-::::::

History

04 Oct 2024, 16:46

Type	Values Removed	Values Added
References	~~() https://cert-portal.siemens.com/productcert/html/ssa-943925.html -~~	() https://cert-portal.siemens.com/productcert/html/ssa-943925.html - Vendor Advisory
First Time		Siemens sinec Nms Siemens
CPE		cpe:2.3:a:siemens:sinec_nms:::::::: cpe:2.3:a:siemens:sinec_nms:2.0:-::::::

13 Feb 2024, 14:01

Type	Values Removed	Values Added
Summary		(es) Se ha identificado una vulnerabilidad en SINEC NMS (Todas las versiones < V2.0 SP1). La aplicación afectada permite a los usuarios cargar archivos arbitrarios a través de TFTP. Esto podría permitir a un atacante cargar imágenes de firmware maliciosas u otros archivos, lo que podría conducir a la ejecución remota de código.

13 Feb 2024, 09:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-02-13 09:15

Updated : 2024-10-04 16:46

NVD link : CVE-2024-23811

Mitre link : CVE-2024-23811

CVE.ORG link : CVE-2024-23811

JSON object : View

Products Affected

siemens

sinec_nms

CWE

CWE-434

Unrestricted Upload of File with Dangerous Type

{"id": "CVE-2024-23811", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "productcert@siemens.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2024-02-13T09:15:49.760", "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-943925.html", "tags": ["Vendor Advisory"], "source": "productcert@siemens.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "productcert@siemens.com", "description": [{"lang": "en", "value": "CWE-434"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en SINEC NMS (Todas las versiones < V2.0 SP1). La aplicaci\u00f3n afectada permite a los usuarios cargar archivos arbitrarios a trav\u00e9s de TFTP. Esto podr\u00eda permitir a un atacante cargar im\u00e1genes de firmware maliciosas u otros archivos, lo que podr\u00eda conducir a la ejecuci\u00f3n remota de c\u00f3digo."}], "lastModified": "2024-10-04T16:46:51.987", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7F0A543-38E1-48B9-A984-259081E49EAA", "versionEndExcluding": "2.0"}, {"criteria": "cpe:2.3:a:siemens:sinec_nms:2.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "631E4756-904C-4B57-A991-76BA59D7B901"}], "operator": "OR"}]}], "sourceIdentifier": "productcert@siemens.com"}