CVE-2024-41941CWE-863

A vulnerability has been identified in SINEC NMS (All versions < V3.0)

Medium · published August 13, 2024

CVSS v4.0
5.3
EPSS
0%
Percentile
16.8
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and modify settings in the application without authorization.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00260 · 16.8th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2024-08-13T07:54Z
EPSS history
Timeline
  • 13 AUG 07:54Z
    A vulnerability has been identified in SINEC NMS (All versions < V3.0)
    cvelistv5