SSA-330339 V1.0: Web Vulnerabilities in SINEC NMS

Risk Summary

<p>A recent update for SINEC NMS fixed multiple vulnerabilities. The most severe of these vulnerabilities could allow an attacker to manipulate the SINEC NMS configuration by tricking an admin to click on a malicious link.</p> <p>Siemens has released an update for SINEC NMS and recommends to update to the latest version.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)