CVE-2021-37201

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). The web interface of affected devices is vulnerable to a Cross-Site Request Forgery (CSRF) attack. This could allow an attacker to manipulate the SINEC NMS configuration by tricking an unsuspecting user with administrative privileges to click on a malicious link.

Score

CVSS 3.1 8.8 High

Status

Modified - productcert@siemens.com

Published

2021-09-14

Last modified

2024-08-04

Weaknesses

CWE-352

Affected products

• Sinec Network Management System (Siemens)
• Sinec Nms (Siemens)

References

• https://cert-portal.siemens.com/productcert/pdf/ssa-330339.pdf