Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:sinec_network_management_system:1.0:sp1:*:*:*:*:*:*

part: a version: 1.0 update: sp1

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSinec Network Management System (dad1561a-a9b7-5f50-91bb-e85f9501bed7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-33721 vulnerable 2026-06-08 05:32:12.235243 Details available
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2). The affected application incorrectly neutralizes special elements when creating batch operations which could lead to command injection. An authenticated remote attacker with administrative privileges could exploit this vulnerability to execute arbitrary code on the system with system privileges.
Published: 2021-08-10T10:35:32.000Z
Updated: 2024-08-03T23:58:22.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25237 vulnerable 2026-06-08 05:22:36.610458 Details available
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2). When uploading files to an affected system using a zip container, the system does not correctly check if the relative file path of the extracted files is still within the intended target directory. With this an attacker could create or overwrite arbitrary files on an affected system. This type of vulnerability is also known as 'Zip-Slip'. (ZDI-CAN-12054)
Published: 2021-02-09T15:38:17.000Z
Updated: 2024-08-04T15:33:05.612Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.