CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-41940
Severity
CRITICAL
CVSS
9.1
EPSS
0.56%
Original NVD Description
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly validate user input to a privileged command queue. This could allow an authenticated attacker to execute OS commands with elevated privileges.
Related CVEs
Other vulnerabilities affecting the same vendor(s)