CVE-2024-36398 Information

Description

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application executes a subset of its services as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges.

Reference

https://cert-portal.siemens.com/productcert/html/ssa-784301.html