SN
Product
SINEC NMS
On CISA KEVExploited in the wildRansomware-linked
63
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 35Medium 18Low 2
Watch
Add SINEC NMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-42550 | 6.6 | Dec 16 | In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute… Affected: before 1.0.3 |
| CVE-2024-47808 | 6.5 | Nov 12 | A vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1) Affected: before 3.0; 3.0 |
| CVE-2024-2466 | 6.5 | Mar 27 | TLS certificate check bypass with mbedTLS Affected: before V3.0 SP1 |
| CVE-2023-6129 | 6.5 | Jan 9 | POLY1305 MAC implementation corrupts vector registers on PowerPC Affected: before V3.0 SP1 |
| CVE-2023-46218 | 6.5 | Dec 7 | This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible Affected: before V3.0 SP1 |
| CVE-2023-39615 | 6.5 | Aug 29 | Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c Affected: before V3.0 |
| CVE-2021-33727 | 6.5 | Oct 12 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0 |
| CVE-2021-33723 | 6.5 | Oct 12 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0 |
| CVE-2024-2379 | 6.3 | Mar 27 | QUIC certificate check bypass with wolfSSL Affected: before V3.0 SP1 |
| CVE-2023-6237 | 5.9 | Apr 25 | Excessive time spent checking invalid RSA public keys Affected: before V3.0 SP1 |
| CVE-2023-52426 | 5.5 | Feb 4 | libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time Affected: before V3.0 |
| CVE-2024-0727 | 5.5 | Jan 26 | PKCS12 Decoding crashes Affected: before V3.0 SP1 |
| CVE-2023-44315 | 5.4 | Oct 10 | A vulnerability has been identified in SINEC NMS (All versions < V2.0) Affected: before 2.0 |
| CVE-2024-28182 | 5.3 | Apr 4 | Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage Affected: before V3.0 |
| CVE-2023-46219 | 5.3 | Dec 12 | When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should… Affected: before V3.0 SP1 |
| CVE-2023-5678 | 5.3 | Nov 6 | Excessive time spent in DH check / generation with large Q parameter value Affected: before V3.0 SP1 |
| CVE-2021-33722 | 4.9 | Oct 12 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1) Affected: before 1.0; 1.0; 1.0; 1.0 |
| CVE-2024-41941 | 4.3 | Aug 13 | A vulnerability has been identified in SINEC NMS (All versions < V3.0) Affected: before 3.0 |
Showing 18
