CVE-2021-33721CWE-78

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2)

published August 10, 2021

CVSS
—
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2). The affected application incorrectly neutralizes special elements when creating batch operations which could lead to command injection. An authenticated remote attacker with administrative privileges could exploit this vulnerability to execute arbitrary code on the system with system privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02672 · 85.7th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2021-08-10T10:35Z
EPSS history
Timeline
  • 10 AUG 10:35Z
    A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2)
    cvelistv5