SSA-318832 V1.0: SQL Injection Vulnerability in SINEC NMS

Risk Summary

<p>SINEC NMS is affected by SQL injection vulnerability that could allow an authenticated low privileged attacker to exploit by inserting malicious data and achieve privilege escalation.</p> <p>Siemens has released a new version for SINEC NMS and recommends to update to the latest version.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)