Vulnerabilities > CVE-2024-41941 - Incorrect Authorization vulnerability in Siemens Sinec NMS 1.0/1.0.3/2.0

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
siemens
CWE-863

Summary

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and modify settings in the application without authorization.

Vulnerable Configurations

Part Description Count
Application
Siemens
6

Common Weakness Enumeration (CWE)