{"id":"CVE-2021-33724","aliases":["EUVD-2021-20401","GHSA-jcg2-3p6x-f868"],"status":"published","title":"A vulnerability has been identified in SINEC NMS (All versions \u003c V1.0 SP2 Update 1). The affected...","description":"A vulnerability has been identified in SINEC NMS (All versions \u003c V1.0 SP2 Update 1). The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary file or directory under a user controlled path.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01033,"percentile":0.64187,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2021-10-12T09:49:25Z","modified":"2026-06-17T03:55:06Z","products":[{"vendor":"siemens","product":"sinec nms"},{"vendor":"siemens","product":"sinec_nms"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33724"},{"url":"https://github.com/advisories/GHSA-jcg2-3p6x-f868"}],"sources":{"cve":[{"id":"CVE-2021-33724","description":"A vulnerability has been identified in SINEC NMS (All versions \u003c V1.0 SP2 Update 1). The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary file or directory under a user controlled path.","status":"published","published":"2021-10-12T09:49:25Z","modified":"2024-08-03T23:58:22.867Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:33:10.204494Z"}],"euvd":[{"id":"EUVD-2021-20401","description":"A vulnerability has been identified in SINEC NMS (All versions \u003c V1.0 SP2 Update 1). The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary file or directory under a user controlled path.","status":"published","published":"2021-10-12T09:49:25Z","modified":"2024-08-03T23:58:22Z","updated_at":"2026-11-03T03:24:33.318275Z"}],"ghsa":[{"id":"GHSA-jcg2-3p6x-f868","title":"A vulnerability has been identified in SINEC NMS (All versions \u003c V1.0 SP2 Update 1). The affected...","description":"A vulnerability has been identified in SINEC NMS (All versions \u003c V1.0 SP2 Update 1). The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary file or directory under a user controlled path.","status":"published","published":"2022-05-24T19:17:22Z","modified":"2023-01-30T05:02:47Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:46:43.162136Z"}],"nvd":[{"id":"CVE-2021-33724","description":"A vulnerability has been identified in SINEC NMS (All versions \u003c V1.0 SP2 Update 1). The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary file or directory under a user controlled path.","status":"published","published":"2021-10-12T10:15:11.817Z","modified":"2026-06-17T03:55:06.703Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:06:59.689345Z"}]}}