Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9gq5-mwjf-5wf3

Опубликовано: 13 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 7.8

Описание

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application executes a subset of its services as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges.

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application executes a subset of its services as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges.

EPSS

Процентиль: 34%
0.00137
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-250

Связанные уязвимости

CVSS3: 7.8
nvd
больше 1 года назад

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application executes a subset of its services as `NT AUTHORITY\SYSTEM`. This could allow a local attacker to execute operating system commands with elevated privileges.

CVSS3: 7.8
fstec
больше 1 года назад

Уязвимость системы сетевого управления для мониторинга промышленными сетями Siemens SINEC NMS, связанная с недостатками разграничения привилегий, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 34%
0.00137
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-250