Security Advisory

CVE-2021-33728

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-10-12 09:49:28

Last updated 2024-08-03 23:58:22

Assigner siemens

State PUBLISHED

Description

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to upload JSON objects that are deserialized to JAVA objects. Due to insecure deserialization of user-supplied content by the affected software, a privileged attacker could exploit this vulnerability by sending a crafted serialized Java object. An exploit could allow the attacker to execute arbitrary code on the device with root privileges.

← Browse all CVEs View on cve.org ↗