CVE-2024-47808
A vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1). The affected application contains a database function, that does not properly restrict the permission…
Published: 2024-11-12 · CVSS: 8.3 · CVSS 4.0
A vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1). The affected application contains a database function, that does not properly restrict the permissions of users to write to the filesystem of the host system. This could allow an authenticated medium-privileged attacker to write arbitrary content to any location in the filesystem of the host system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7