← CVE Intelligence

CVE-2024-31978

Siemens / SINEC NMS PUBLISHED

Description (CNA)

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download files from the file system. Under certain circumstances the downloaded files are deleted from the file system.

Affected (CNA)

Vendor / productVersions
Siemens / SINEC NMSaffected 0 before V2.0 SP2

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.