CVE-2021-37200
published 2021-09-14CVE-2021-37200: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). An attacker with access to the webserver of an affected system could download…
high7.7CVSS 3.1
AVNACLPRLUINSCCHINAN
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). An attacker with access to the webserver of an affected system could download arbitrary files from the underlying filesystem by sending a specially crafted HTTP request.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | sinec_network_management_system | < 1.0 | 1.0 |
| siemens | sinec_network_management_system | — | — |
| siemens | sinec_nms | — | — |