CVE-2024-23811

published 2024-02-13

CVE-2024-23811: A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This…

high 8.8 CVSS 3.1

AV A AC L PR N UI N S U C H I H A H

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
siemens	sinec_nms	< V2.0 SP1	V2.0 SP1
siemens	sinec_nms	< 2.0	2.0
siemens	sinec_nms	—	—

CWE-434