CVE-2021-33731: SQL Injection
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-33731?
CVE-2021-33731 is a vulnerability in SINEC NMS all versions prior to V1.0 SP2 Update 1, which allows a privileged authenticated attacker to execute arbitrary commands in the local database.
What is the severity of CVE-2021-33731?
The severity of CVE-2021-33731 is high, with a CVSS score of 7.2.
How does CVE-2021-33731 affect Siemens SINEC NMS?
CVE-2021-33731 affects Siemens SINEC NMS versions < V1.0 SP2 Update 1, allowing a privileged authenticated attacker to execute arbitrary commands in the local database.
How can I fix CVE-2021-33731?
To fix CVE-2021-33731, upgrade to SINEC NMS V1.0 SP2 Update 1 or a later version.
What is CWE-89 associated with CVE-2021-33731?
CWE-89 is a vulnerability identified as 'Improper Neutralization of Special Elements used in an SQL Command' and is associated with CVE-2021-33731.