Medium severity · published Oct 12, 2021
CVE-2021-33727
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1)
6.5
CVSS
0.9%
EPSS
No
On KEV
Description
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could download the user profile of any user. With this, the attacker could leak confidential information of any user in the affected system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SN
Sinec Nms · Siemens
before 1.0; 1.0; 1.0; 1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-33727
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-33727
Patch
https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
More from Sinec Nms
9.0
CVE-2021-40438
mod_proxy SSRF
7.5
CVE-2023-44487
HTTP/2 Rapid Reset Attack Vulnerability
9.8
CVE-2025-40736
A vulnerability has been identified in SINEC NMS (All versions < V4.0)
9.8
CVE-2024-33698
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1…
9.8
CVE-2024-23810
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1)