cbcvebase.
CVE-2021-33726
published 2021-10-12

CVE-2021-33726: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to download arbitrary files under a user…

high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to download arbitrary files under a user controlled path and does not correctly check if the relative path is still within the intended target directory.

Affected

3 ranges
VendorProductVersion rangeFixed in
siemenssinec_nms< 1.01.0
siemenssinec_nms——
siemenssinec_nms——
CVE-2021-33726 — Path Traversal in Siemens Sinec NMS | cvebase