Known vulnerabilities in SINEC NMS - page 2

Vendor: Siemens
Software: SINEC NMS
Software CPE: cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 51
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SINEC NMS SINEC NMS is affected by 51 known vulnerabilities: 8 high, 23 medium, 20 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70457 - Security Features
CVE-2022-43551		 CWE-254 Medium
No
No
 1.0.3.1 21.12.2022 SB2022122102
SB2022122620
SB2023010612
and 32 more
#VU70456 - Use After Free
CVE-2022-43552		 CWE-416 Low
No
No
 1.0.3.1 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU68749 - Cleartext Transmission of Sensitive Information
CVE-2022-42916		 CWE-319 Medium
No
No
 1.0.3.1 26.10.2022 SB2022102624
SB2022102662
SB2022102703
and 27 more
#VU68748 - Double Free
CVE-2022-42915		 CWE-415 Medium
No
No
 1.0.3.1 26.10.2022 SB2022102624
SB2022102662
SB2022102705
and 26 more
#VU68718 - Use After Free
CVE-2022-43680		 CWE-416 Medium
No
No
 1.0.3.1 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU61229 - Deserialization of Untrusted Data
CVE-2022-24282		 CWE-502 Low
No
No
 - 10.03.2022 SB2022031006
#VU61228 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-24281		 CWE-89 Low
No
No
 - 10.03.2022 SB2022031006
#VU61226 - Improper Privilege Management
CVE-2022-25311		 CWE-269 Low
No
No
 - 10.03.2022 SB2022031006
#VU59053 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42550		 CWE-94 Medium
No
No
 1.0.3 19.12.2021 SB2021121904
SB2022022307
SB2022032929
and 21 more
#VU57396 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-33731		 CWE-89 Low
No
No
 1.0 SP2 Update 1 15.10.2021 SB2021101508
#VU57395 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-33730		 CWE-89 Low
No
No
 1.0 SP2 Update 1 15.10.2021 SB2021101508
#VU57394 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-33729		 CWE-89 Medium
No
No
 1.0 SP2 Update 1 15.10.2021 SB2021101508
#VU57393 - Deserialization of Untrusted Data
CVE-2021-33728		 CWE-502 Low
No
No
 1.0 SP2 Update 1 15.10.2021 SB2021101508
#VU57392 - Exposure of sensitive information to an unauthorized actor
CVE-2021-33727		 CWE-200 Medium
No
No
 1.0 SP2 Update 1 15.10.2021 SB2021101508
#VU57391 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-33726		 CWE-22 Medium
No
No
 1.0 SP2 Update 1 15.10.2021 SB2021101508
#VU57390 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-33725		 CWE-22 Low
No
No
 1.0 SP2 Update 1 15.10.2021 SB2021101508
#VU57388 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-33724		 CWE-22 Medium
No
No
 1.0 SP2 Update 1 15.10.2021 SB2021101508
#VU57386 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-33722		 CWE-22 Low
No
No
 1.0 SP2 Update 1 15.10.2021 SB2021101508
#VU56679 - Memory corruption
CVE-2021-39275		 CWE-119 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Available
Exploited
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more


Showing elements 21 - 40 out of 51