CVE-2024-23810

published 2024-02-13

CVE-2024-23810: A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application is vulnerable to SQL injection. This could allow an…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application is vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
siemens	sinec_nms	< V2.0 SP1	V2.0 SP1
siemens	sinec_nms	< 2.0	2.0
siemens	sinec_nms	—	—

CWE-89