VDB
CVE-2024-31978
CVE-2024-31978
PUBLISHED
CVSS 7.599999904632568 HIGH
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download files from the file system. Under certain circumstances the downloaded files are deleted from the file system.
EPSS 0.18% · 39.7th percentile
Risk Scores
CVSS v3.1
7.599999904632568
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C
EPSS Score
0.18%
39.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SINEC NMS | 0 |
Timeline
- Apr 9, 2024 CVE Published
- Apr 10, 2024 EPSS Score
- May 5, 2024 EPSS Score
- May 30, 2024 EPSS Score
- Jun 24, 2024 EPSS Score
- Jul 19, 2024 EPSS Score
- Aug 14, 2024 EPSS Score
- Sep 4, 2024 CVE Updated
- Sep 8, 2024 EPSS Score
- Oct 3, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 28, 2024 EPSS Score