Vulnerability CVE-2024-23810


Published: 2024-02-13

Description:
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application is vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database.

Type:

CWE-89

(Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))

 References:
https://cert-portal.siemens.com/productcert/html/ssa-943925.html

Copyright 2026, cxsecurity.com

 

Back to Top