CVE-2024-23811

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution.

• CWE-434

• https://cert-portal.siemens.com/productcert/html/ssa-943925.htmlVendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-943925.htmlVendor Advisory

Published

Feb 13, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-23806Sensitive data can be extracted from HID iCLASS SE reader co…5.3
• CVE-2024-23807The Apache Xerces C++ XML parser on versions 3.0.0 before 3.…9.8
• CVE-2024-23808in OpenHarmony v4.0.0 and prior versions allow a local attac…7.8
• CVE-2024-23809A double-free vulnerability exists in the BrainVision ASCII …9.8
• CVE-2024-2381The AliExpress Dropshipping with AliNext Lite plugin for Wor…8.8
• CVE-2024-23810A vulnerability has been identified in SINEC NMS (All versio…9.8
• CVE-2024-23812A vulnerability has been identified in SINEC NMS (All versio…8.8
• CVE-2024-23813A vulnerability has been identified in Polarion ALM (All ver…9.8
• CVE-2024-23814The integrated ICMP service of the network stack of affected…6.9
• CVE-2024-23815A vulnerability has been identified in Desigo CC (All versio…8.7
• CVE-2024-23816A vulnerability has been identified in Location Intelligence…9.8
• CVE-2024-23817Dolibarr is an enterprise resource planning (ERP) and custom…6.1