CVE-2024-41938

No fix known EPSS <1%CVSS 5.5

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The importCertificate function of the SINEC NMS Control web application contains a path traversal vulnerability. This could allow an authenticated attacker it to delete arbitrary certificate files on the drive SINEC NMS is installed on.

Published 2024-08-13 · CVE record · OSV

Products: Siemens SINEC NMS