← Database

CVE-2024-41940

CRITICAL CVSS: 9.1 Published: 2024-08-13 Modified: 2026-06-17

Description

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly validate user input to a privileged command queue. This could allow an authenticated attacker to execute OS commands with elevated privileges.

Affected Platforms

Siemens Sinec Nms

Weakness Type

CWE-20, NVD-CWE-noinfo

References