{"id":"CVE-2024-23810","aliases":["EUVD-2024-21263","GHSA-qf5j-fwc8-wj57"],"status":"published","title":"A vulnerability has been identified in SINEC NMS (All versions \u003c V2.0 SP1). The affected...","description":"A vulnerability has been identified in SINEC NMS (All versions \u003c V2.0 SP1). The affected application is vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00654,"percentile":0.51845,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2024-02-13T09:00:21Z","modified":"2026-06-17T07:13:38Z","products":[{"vendor":"siemens","product":"sinec nms"},{"vendor":"siemens","product":"sinec_nms"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-943925.html","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23810"},{"url":"https://github.com/advisories/GHSA-qf5j-fwc8-wj57"}],"sources":{"cve":[{"id":"CVE-2024-23810","description":"A vulnerability has been identified in SINEC NMS (All versions \u003c V2.0 SP1). The affected application is vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database.","status":"published","published":"2024-02-13T09:00:21.96Z","modified":"2025-05-09T18:27:53.038Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:34:05.444281Z"}],"euvd":[{"id":"EUVD-2024-21263","description":"A vulnerability has been identified in SINEC NMS (All versions \u003c V2.0 SP1). The affected application is vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database.","status":"published","published":"2024-02-13T09:00:21Z","modified":"2025-05-09T18:27:53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T20:32:50.734545Z"}],"ghsa":[{"id":"GHSA-qf5j-fwc8-wj57","title":"A vulnerability has been identified in SINEC NMS (All versions \u003c V2.0 SP1). The affected...","description":"A vulnerability has been identified in SINEC NMS (All versions \u003c V2.0 SP1). The affected application is vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database.","status":"published","published":"2024-02-13T09:30:33Z","modified":"2024-02-13T09:30:37Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:55:36.780787Z"}],"nvd":[{"id":"CVE-2024-23810","description":"A vulnerability has been identified in SINEC NMS (All versions \u003c V2.0 SP1). The affected application is vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database.","status":"published","published":"2024-02-13T09:15:49.573Z","modified":"2026-06-17T07:13:38.917Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:09:35.738752Z"}]}}