Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

siemens sinec nms vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2024-31978
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated malicious user to download files f...
8.8
CVSSv3
CVE-2024-23810
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application is vulnerable to SQL injection. This could allow an unauthenticated remote malicious user to execute arbitrary SQL queries on the server database.
8.8
CVSSv3
CVE-2024-23811
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This could allow an malicious user to upload malicious firmware images or other files, that could potentially lead to remote co...
8
CVSSv3
CVE-2024-23812
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application incorrectly neutralizes special elements when creating a report which could lead to command injection.
8.8
CVSSv3
CVE-2023-46281
A vulnerability has been identified in Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), SINUMERIK Integrate RunMyHMI /Automotive (All versions), Totally Integrated Automation Portal (TIA Portal) V14 (All...
Siemens Totally Integrated Automation Portal 18Siemens Simatic Pcs NeoSiemens Totally Integrated Automation PortalSiemens Totally Integrated Automation Portal -Siemens Opcenter Quality -Siemens Sinumerik Integrate Runmyhmi \\/automotive -
6.1
CVSSv3
CVE-2023-46282
A vulnerability has been identified in Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), SINUMERIK Integrate RunMyHMI /Automotive (All versions), Totally Integrated Automation Portal (TIA Portal) V14 (All...
Siemens Totally Integrated Automation Portal 18Siemens Simatic Pcs NeoSiemens Totally Integrated Automation PortalSiemens Totally Integrated Automation Portal -Siemens Opcenter Quality -Siemens Sinumerik Integrate Runmyhmi \\/automotive -
7.5
CVSSv3
CVE-2023-46283
A vulnerability has been identified in Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), SINUMERIK Integrate RunMyHMI /Automotive (All versions), Totally Integrated Automation Portal (TIA Portal) V14 (All...
Siemens Totally Integrated Automation Portal 18Siemens Simatic Pcs NeoSiemens Totally Integrated Automation PortalSiemens Totally Integrated Automation Portal -Siemens Opcenter Quality -Siemens Sinumerik Integrate Runmyhmi \\/automotive -
7.5
CVSSv3
CVE-2023-46284
A vulnerability has been identified in Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), SINUMERIK Integrate RunMyHMI /Automotive (All versions), Totally Integrated Automation Portal (TIA Portal) V14 (All...
Siemens Totally Integrated Automation Portal 18Siemens Simatic Pcs NeoSiemens Totally Integrated Automation PortalSiemens Totally Integrated Automation Portal -Siemens Opcenter Quality -Siemens Sinumerik Integrate Runmyhmi \\/automotive -
7.5
CVSSv3
CVE-2023-46285
A vulnerability has been identified in Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), SINUMERIK Integrate RunMyHMI /Automotive (All versions), Totally Integrated Automation Portal (TIA Portal) V14 (All...
Siemens Totally Integrated Automation Portal 18Siemens Simatic Pcs NeoSiemens Totally Integrated Automation PortalSiemens Totally Integrated Automation Portal -Siemens Opcenter Quality -Siemens Sinumerik Integrate Runmyhmi \\/automotive -
5.3
CVSSv3
CVE-2023-30588
When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate() API a non-expect termination occurs making it susceptible to DoS attacks when the attacker could force interruptions of application processing, as the process terminates when acces...
Nodejs Node.js
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook