CVE-2024-41938: Path Traversal
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The importCertificate function of the SINEC NMS Control web application contains a path traversal vulnerability. This could allow an authenticated attacker it to delete arbitrary certificate files on the drive SINEC NMS is installed on.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41938?
CVE-2024-41938 is considered a critical vulnerability due to its potential for remote file deletion by authenticated attackers.
How do I fix CVE-2024-41938?
To fix CVE-2024-41938, upgrade SINEC NMS to version 3.0 or later to eliminate the path traversal vulnerability.
What kind of attack is possible with CVE-2024-41938?
CVE-2024-41938 allows authenticated attackers to perform a path traversal attack, enabling them to delete arbitrary certificate files.
Which versions of SINEC NMS are affected by CVE-2024-41938?
All versions of SINEC NMS prior to version 3.0 are affected by CVE-2024-41938.
Can unauthenticated users exploit CVE-2024-41938?
No, CVE-2024-41938 can only be exploited by authenticated users of the SINEC NMS Control web application.