CVE-2024-36398: High severity siemens sinec nms sp1 update 1 vulnerability
Published Aug 13, 2024
·Updated
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application executes a subset of its services as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges.
Affected Software
1 affected component
Siemens SINEC NMS<3.0
Event History
Aug 13, 2024
CVE Published
via MITRE·07:54 AM
Data Sourced
via MITRE·07:54 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-36398?
CVE-2024-36398 is considered to have high severity due to the potential for local attackers to execute commands with elevated privileges.
2
How do I fix CVE-2024-36398?
To fix CVE-2024-36398, upgrade SINEC NMS to version 3.0 or later.
3
Who is affected by CVE-2024-36398?
CVE-2024-36398 affects all versions of SINEC NMS prior to version 3.0.
4
What type of systems are impacted by CVE-2024-36398?
CVE-2024-36398 impacts systems running vulnerable versions of Siemens SINEC NMS.
5
Can CVE-2024-36398 be exploited remotely?
No, CVE-2024-36398 requires local access to exploit the elevated privileges.