CVE-2021-33727: Infoleak
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could download the user profile of any user. With this, the attacker could leak confidential information of any user in the affected system.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-33727?
CVE-2021-33727 is a vulnerability in SINEC NMS, where an authenticated attacker could download the user profile of any user, potentially leaking confidential information.
What is the affected software of CVE-2021-33727?
The affected software is Siemens SINEC NMS, all versions prior to V1.0 SP2 Update 1.
How severe is CVE-2021-33727?
CVE-2021-33727 has a severity level of medium, with a severity value of 6.5.
How can an attacker exploit CVE-2021-33727?
An attacker can exploit CVE-2021-33727 by authenticating and then downloading the user profile of any user in the affected system.
Is there a fix for CVE-2021-33727?
Yes, Siemens has released an update to address this vulnerability. It is recommended to update to at least V1.0 SP2 Update 1.