Vulnetix
Try Vulnetix Request Demo
CVE-2021-37200 PUBLISHED CVSS 7.699999809265137 HIGH

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). An attacker with access to the webserver of an affected system could download arbitrary files from the underlying filesystem by sending a specially crafted HTTP request.

EPSS 2.25% · 84.5th percentile

Risk Scores

CVSS v3.1
7.699999809265137
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS Score
2.25%
84.5th percentile

Affected Products

VendorProductVersions
SiemensSINEC NMSAll versions < V1.0 SP1
siemenssinec_network_management_system0, 1.0

Timeline

References

…and 2 more

Open in Interactive Console →