CVE-2024-41939CWE-863

A vulnerability has been identified in SINEC NMS (All versions < V3.0)

High · published August 13, 2024

CVSS v4.0
8.7
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and elevate their privileges on the application.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00510 · 42.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2024-08-13T07:54Z
EPSS history
Timeline
  • 13 AUG 07:54Z
    A vulnerability has been identified in SINEC NMS (All versions < V3.0)
    cvelistv5