VYPR
← All advisories
High severity7.7NVD Advisory· Published Sep 14, 2021· Updated Jun 17, 2026

CVE-2021-37200

CVE-2021-37200

Description

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). An attacker with access to the webserver of an affected system could download arbitrary files from the underlying filesystem by sending a specially crafted HTTP request.

Affected products

4
  • Siemens Foundation/Sinec Network Management System2 versions
    cpe:2.3:a:siemens:sinec_network_management_system:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:siemens:sinec_network_management_system:*:*:*:*:*:*:*:*range: <1.0
    • cpe:2.3:a:siemens:sinec_network_management_system:1.0:-:*:*:*:*:*:*
  • Siemens Foundation/Sinec Nmsllm-fuzzy2 versions
    < V1.0 SP1+ 1 more
    • (no CPE)range: < V1.0 SP1
    • (no CPE)range: All versions < V1.0 SP1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.