CVE-2024-23812
published 2024-02-13CVE-2024-23812: A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application incorrectly neutralizes special elements when creating a…
high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application incorrectly neutralizes special elements when creating a report which could lead to command injection.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | sinec_nms | < V2.0 SP1 | V2.0 SP1 |
| siemens | sinec_nms | < 2.0 | 2.0 |
| siemens | sinec_nms | — | — |