CVE-2024-41940

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly validate user input to a privileged command queue. This could allow an authenticated attacker to execute OS commands with elevated privileges.

• CWE-20

• https://cert-portal.siemens.com/productcert/html/ssa-784301.htmlVendor Advisory

Published

Aug 13, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41935In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-41936A directory traversal vulnerability affecting Vonets industr…7.5
• CVE-2024-41937Apache Airflow, versions before 2.10.0, have a vulnerability…6.1
• CVE-2024-41938A vulnerability has been identified in SINEC NMS (All versio…3.8
• CVE-2024-41939A vulnerability has been identified in SINEC NMS (All versio…8.8
• CVE-2024-4194The The Album and Image Gallery plus Lightbox plugin for Wor…7.3
• CVE-2024-41941A vulnerability has been identified in SINEC NMS (All versio…4.3
• CVE-2024-41942JupyterHub is software that allows one to create a multi-use…7.2
• CVE-2024-41943I, Librarian is an open-source version of a PDF managing Saa…4.6
• CVE-2024-41944Xibo is a content management system (CMS). An SQL injection …6.5
• CVE-2024-41945fuels-ts is a library for interacting with Fuel v2. The typ…3.1
• CVE-2024-41946REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a …7.5