← Back

CVE-2021-33727

nvd nist
Published: Oct 12, 2021Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could download the user profile of any user. With this, the attacker could leak confidential information of any user in the affected system.

Affected (4)

Products: Siemens: Sinec Nms
Siemens
1 product
Sinec Nms
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Siemens
Sinec Nms
Before 1.0
Sinec Nms
Version 1.0
Sinec Nms
Version 1.0 sp1
Sinec Nms
Version 1.0 sp2

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: productcert@siemens.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.