Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:sinec_nms:1.0:sp1:*:*:*:*:*:*

part: a version: 1.0 update: sp1

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSinec Nms (79b3d6a9-dfb2-58fe-a73a-01cdd8fdba1c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-3449 vulnerable 2026-06-08 05:33:52.197122 NULL pointer deref in signature_algorithms processing
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).
Published: 2021-03-25T14:25:13.659Z
Updated: 2026-10-08T21:13:50.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33736 vulnerable 2026-06-08 05:32:12.243922 Details available
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.
Published: 2021-10-12T09:49:35.000Z
Updated: 2024-08-03T23:58:22.869Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33735 vulnerable 2026-06-08 05:32:12.243612 Details available
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.
Published: 2021-10-12T09:49:34.000Z
Updated: 2024-08-03T23:58:22.843Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33734 vulnerable 2026-06-08 05:32:12.243288 Details available
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.
Published: 2021-10-12T09:49:34.000Z
Updated: 2024-08-03T23:58:22.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33733 vulnerable 2026-06-08 05:32:12.242954 Details available
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.
Published: 2021-10-12T09:49:33.000Z
Updated: 2024-08-03T23:58:22.841Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33732 vulnerable 2026-06-08 05:32:12.242636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33731 vulnerable 2026-06-08 05:32:12.242310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33730 vulnerable 2026-06-08 05:32:12.241951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33729 vulnerable 2026-06-08 05:32:12.241378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33728 vulnerable 2026-06-08 05:32:12.241034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33727 vulnerable 2026-06-08 05:32:12.240604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33726 vulnerable 2026-06-08 05:32:12.240285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33725 vulnerable 2026-06-08 05:32:12.239976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33724 vulnerable 2026-06-08 05:32:12.239644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33723 vulnerable 2026-06-08 05:32:12.239167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33722 vulnerable 2026-06-08 05:32:12.237539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.