CVE-2021-37200 — Vulnetix

CVE-2021-37200 PUBLISHED CVSS 7.699999809265137 HIGH

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). An attacker with access to the webserver of an affected system could download arbitrary files from the underlying filesystem by sending a specially crafted HTTP request.

EPSS 2.25% · 84.9th percentile

Risk Scores

CVSS 3.1

7.699999809265137

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS Score

2.25%

84.9th percentile

Affected Products

Vendor	Product	Versions
Siemens	SINEC NMS	All versions < V1.0 SP1
siemens	sinec_network_management_system	0, 1.0

Exploit Intelligence

This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 (CVE-2016-10708) by sending unexpected `SSH_MSG_NEWKEYS` packets. (github-poc)
This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 (CVE-2016-10708) by sending unexpected `SSH_MSG_NEWKEYS` packets. (github-poc)
This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 (CVE-2016-10708) by sending unexpected `SSH_MSG_NEWKEYS` packets. (github-poc)
This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 (CVE-2016-10708) by sending unexpected `SSH_MSG_NEWKEYS` packets. (github-poc)
https://cert-portal.siemens.com/productcert/pdf/ssa-330339.pdf (circl)

Timeline

Sep 14, 2021 CVE Published
Sep 15, 2021 EPSS Score
Nov 11, 2021 EPSS Score
Jan 8, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Mar 6, 2022 EPSS Score
May 3, 2022 EPSS Score
Jun 29, 2022 EPSS Score
Aug 27, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Feb 15, 2023 EPSS Score
Mar 7, 2023 EPSS Score

References

…and 2 more

Open in Interactive Console →