CVE-2024-23811: Siemens Sinec Nms

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution.

Affected products

• Siemens Sinec Nms: before 2.0 (fixed in 2.0); version 2.0 only

Published 2024-02-13. Last modified 2026-06-17.