CVE-2024-23811
Assigner: siemens
Published: 2024-02-13T09:00:23.301Z
State: PUBLISHED
descriptions: value: A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution.
affected: vendor: Siemens
product: SINEC NMS
versions: status: affected
version: 0
lessThan: V2.0 SP1
versionType: custom
defaultStatus: unknown
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
baseScore: 8.8
baseSeverity: HIGH
problemTypes: descriptions: cweId: CWE-434
description: CWE-434: Unrestricted Upload of File with Dangerous Type
type: CWE