CVE-2021-33723

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could change the user profile of any user without proper authorization. With this, the attacker could change the password of any user in the affected system.

• CWE-285

• https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-163251.pdfPatch, Vendor Advisory

Published

Oct 12, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33717A vulnerability has been identified in JT2Go (All versions <…5.5
• CVE-2021-33718A vulnerability has been identified in Mendix Applications u…5.3
• CVE-2021-33719A vulnerability has been identified in SIPROTEC 5 relays wit…9.8
• CVE-2021-33720A vulnerability has been identified in SIPROTEC 5 relays wit…7.5
• CVE-2021-33721A vulnerability has been identified in SINEC NMS (All versio…7.2
• CVE-2021-33722A vulnerability has been identified in SINEC NMS (All versio…4.9
• CVE-2021-33724A vulnerability has been identified in SINEC NMS (All versio…9.1
• CVE-2021-33725A vulnerability has been identified in SINEC NMS (All versio…9.1
• CVE-2021-33726A vulnerability has been identified in SINEC NMS (All versio…7.5
• CVE-2021-33727A vulnerability has been identified in SINEC NMS (All versio…6.5
• CVE-2021-33728A vulnerability has been identified in SINEC NMS (All versio…7.2
• CVE-2021-33729A vulnerability has been identified in SINEC NMS (All versio…8.8