CVE-2024-41941

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and modify settings in the application without authorization.

Score

CVSS 4.0 5.3 Medium

Status

Analyzed - productcert@siemens.com

Published

2024-08-13

Last modified

2024-08-13

Weaknesses

CWE-863

Affected products

• Sinec Nms (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-784301.html