VDB
ICSA-24-102-07
ICSA-24-102-07
PUBLISHED
CVSS 5.300000190734863 MEDIUM
SINEC NMS before V2.0 SP2 is affected by multiple vulnerabilities. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SINEC NMS |
Timeline
- Apr 9, 2024 CVE Published
References
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices url
- https://www.cisa.gov/topics/industrial-control-systems url
- https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf url
- https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B url
- https://cert-portal.siemens.com/productcert/csaf/ssa-128433.json advisory
- https://cert-portal.siemens.com/productcert/html/ssa-128433.html advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-128433.pdf advisory
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-102-07.json advisory
- https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf url
- https://support.industry.siemens.com/cs/ww/en/view/109954920/ fix
- https://cert-portal.siemens.com/productcert/txt/ssa-128433.txt advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-102-07 advisory
- https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01 url