CVE-2021-33736: SQL Injection
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-33736?
CVE-2021-33736 is a vulnerability found in SINEC NMS, allowing a privileged attacker to execute arbitrary commands in the local database.
How severe is CVE-2021-33736?
CVE-2021-33736 has a severity rating of 7.2 out of 10, which is considered high.
Which versions of SINEC NMS are affected by CVE-2021-33736?
All versions of SINEC NMS prior to V1.0 SP2 Update 1 are affected by CVE-2021-33736.
How can an attacker exploit CVE-2021-33736?
An attacker with privileged authentication can exploit CVE-2021-33736 by sending crafted requests to the webserver of the affected application to execute arbitrary commands in the local database.
Is there a fix available for CVE-2021-33736?
Yes, Siemens has released an update to fix CVE-2021-33736. It is recommended to update to version V1.0 SP2 Update 1 of SINEC NMS.