VDB
CVE-2024-31978
CVE-2024-31978
PUBLISHED
CVSS 7.599999904632568 HIGH
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download files from the file system. Under certain circumstances the downloaded files are deleted from the file system.
EPSS 0.46% · 37.8th percentile
Risk Scores
CVSS 3.1
7.599999904632568
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C
EPSS Score
0.46%
37.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SINEC NMS | 0, 0 |
Timeline
- Apr 9, 2024 CVE Published
- Apr 10, 2024 EPSS Score
- May 6, 2024 EPSS Score
- May 31, 2024 EPSS Score
- Jun 26, 2024 EPSS Score
- Jul 21, 2024 EPSS Score
- Aug 16, 2024 EPSS Score
- Sep 11, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 6, 2024 EPSS Score
- Nov 1, 2024 EPSS Score
- Nov 26, 2024 EPSS Score