Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: Siemens Component: Sinec Network Management System Clear all filters
TI-2022-07142 CVE-2022-22965 · GHSA-36p3-wjmg-h94x

Code injection in Spring Framework

Priority CRITICAL 100KEV

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99638 Published 2022-04-01 Partial fix · 5.2.20.RELEASE, 5.3.18 +2 CWE-94
TI-2022-09004 CVE-2022-25311 · GHSA-35fm-4q2r-j938

Improper privilege management in Siemens SINEC NMS

Priority MEDIUM 41

A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00537 Published 2022-03-08 Fixed in V1.0.3 CWE-269
TI-2022-08165 CVE-2022-24282 · GHSA-h9pr-8j9g-2rhq

Deserialization of untrusted data in Siemens SINEC NMS

Priority LOW 37

A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0143 Published 2022-03-08 Fixed in V1.0.3 CWE-502
TI-2022-08164 CVE-2022-24281 · GHSA-wvr5-w97w-7ch7

SQL injection in Siemens SINEC NMS

Priority MEDIUM 40

A vulnerability has been identified in SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03489 Published 2022-03-08 Fixed in V1.0.3 CWE-89
TI-2021-15263 CVE-2021-37201 · GHSA-hhjr-xgqf-mpfc

Cross-site request forgery in Siemens SINEC NMS

Priority LOW 38

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00429 Published 2021-09-14 No fix listed CWE-352
TI-2021-15262 CVE-2021-37200 · GHSA-fx3m-586f-fprw

Path traversal in Siemens SINEC NMS

Priority MEDIUM 60

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1).

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.3738 Published 2021-09-14 No fix listed CWE-22
TI-2021-13095 CVE-2021-33721 · GHSA-63f9-382x-9vr8

OS command injection in Siemens SINEC NMS

Priority LOW 37

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02672 Published 2021-08-10 No fix listed CWE-78
TI-2020-15474 CVE-2020-25237 · GHSA-3xq9-pprq-hm99

Path traversal in Siemens SINEC NMS

Priority MEDIUM 54

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.20616 Published 2021-02-09 No fix listed CWE-22
TI-2020-06103 CVE-2020-7580 · GHSA-gw48-mf2p-74mv

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2)…

Priority LOW 30

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0046 Published 2020-06-10 Fixed in V17, V21.8 +1 CWE-428