CVE-2021-33723

6.5 mediumEPSS 0.6%

Medium (6.5) in siemens sinec nms. EPSS 0.6% chance of exploitation in the next 30 days.

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could change the user profile of any user without proper authorization. With this, the attacker could change the password of any user in the affected system.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-285
Published: 2021-10-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:sinec_nms

References

https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdf

Check your stack JSON