CVE-2021-33735
Assigner: siemens
Published: 2021-10-12T09:49:34
State: PUBLISHED
affected: product: SINEC NMS
vendor: Siemens
versions: status: affected
version: All versions < V1.0 SP2 Update 1
descriptions: value: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.
problemTypes: descriptions: cweId: CWE-89
description: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
type: CWE