CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-41938
Severity
MEDIUM
CVSS
5.5
EPSS
0.26%
Original NVD Description
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The importCertificate function of the SINEC NMS Control web application contains a path traversal vulnerability. This could allow an authenticated attacker it to delete arbitrary certificate files on the drive SINEC NMS is installed on.
Related CVEs
Other vulnerabilities affecting the same vendor(s)