High severity · published Apr 9, 2024
CVE-2024-31978
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2)
7.6
CVSS
0.5%
EPSS
No
On KEV
Description
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download files from the file system. Under certain circumstances the downloaded files are deleted from the file system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SN
SINEC NMS · Siemens
before V2.0 SP2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-31978
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-31978
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-128433.html
More from SINEC NMS
9.0
CVE-2021-40438
mod_proxy SSRF
7.5
CVE-2023-44487
HTTP/2 Rapid Reset Attack Vulnerability
9.8
CVE-2025-40736
A vulnerability has been identified in SINEC NMS (All versions < V4.0)
9.8
CVE-2024-49775
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions…
9.8
CVE-2024-33698
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1…