VYPR
← All advisories
High severity8.8NVD Advisory· Published Sep 14, 2021· Updated Jun 17, 2026

CVE-2021-37201

CVE-2021-37201

Description

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). The web interface of affected devices is vulnerable to a Cross-Site Request Forgery (CSRF) attack. This could allow an attacker to manipulate the SINEC NMS configuration by tricking an unsuspecting user with administrative privileges to click on a malicious link.

Affected products

4
  • Siemens Foundation/Sinec Network Management System2 versions
    cpe:2.3:a:siemens:sinec_network_management_system:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:siemens:sinec_network_management_system:*:*:*:*:*:*:*:*range: <1.0
    • cpe:2.3:a:siemens:sinec_network_management_system:1.0:-:*:*:*:*:*:*
  • Siemens Foundation/Sinec Nmsllm-fuzzy2 versions
    < V1.0 SP1+ 1 more
    • (no CPE)range: < V1.0 SP1
    • (no CPE)range: All versions < V1.0 SP1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.