{"id":"CVE-2021-37200","aliases":["EUVD-2021-23774","GHSA-fx3m-586f-fprw"],"status":"published","title":"A vulnerability has been identified in SINEC NMS (All versions \u003c V1.0 SP1). An attacker with...","description":"A vulnerability has been identified in SINEC NMS (All versions \u003c V1.0 SP1). An attacker with access to the webserver of an affected system could download arbitrary files from the underlying filesystem by sending a specially crafted HTTP request.","severity":{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.3738,"percentile":0.98549,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2021-09-14T10:47:53Z","modified":"2026-06-17T04:00:15Z","products":[{"vendor":"siemens","product":"sinec nms"},{"vendor":"siemens","product":"sinec_network_management_system"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-330339.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37200"},{"url":"https://github.com/advisories/GHSA-fx3m-586f-fprw"}],"sources":{"cve":[{"id":"CVE-2021-37200","description":"A vulnerability has been identified in SINEC NMS (All versions \u003c V1.0 SP1). An attacker with access to the webserver of an affected system could download arbitrary files from the underlying filesystem by sending a specially crafted HTTP request.","status":"published","published":"2021-09-14T10:47:53Z","modified":"2024-08-04T01:16:03.975Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:32:58.028461Z"}],"euvd":[{"id":"EUVD-2021-23774","description":"A vulnerability has been identified in SINEC NMS (All versions \u003c V1.0 SP1). An attacker with access to the webserver of an affected system could download arbitrary files from the underlying filesystem by sending a specially crafted HTTP request.","status":"published","published":"2021-09-14T10:47:53Z","modified":"2024-08-04T01:16:03Z","updated_at":"2026-11-03T03:24:27.725787Z"}],"ghsa":[{"id":"GHSA-fx3m-586f-fprw","title":"A vulnerability has been identified in SINEC NMS (All versions \u003c V1.0 SP1). An attacker with...","description":"A vulnerability has been identified in SINEC NMS (All versions \u003c V1.0 SP1). An attacker with access to the webserver of an affected system could download arbitrary files from the underlying filesystem by sending a specially crafted HTTP request.","status":"published","published":"2022-05-24T19:14:30Z","modified":"2023-01-30T05:02:12Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:46:35.225326Z"}],"nvd":[{"id":"CVE-2021-37200","description":"A vulnerability has been identified in SINEC NMS (All versions \u003c V1.0 SP1). An attacker with access to the webserver of an affected system could download arbitrary files from the underlying filesystem by sending a specially crafted HTTP request.","status":"published","published":"2021-09-14T11:15:26.24Z","modified":"2026-06-17T04:00:15.23Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:06:58.502206Z"}]}}